Someone claiming to be support contacts you and asks for your seed phrase. What should you do?

Detailed explanation

Phishing and support scams use familiar names, logos, phone numbers or seemingly genuine account details. Attackers often claim an account is at risk and must be secured immediately. They then ask for login details, confirmation codes, a seed phrase, a link click or remote access to a computer or phone.

Scammers can also create fake wallet apps, browser extensions, update files or lookalike download sites. An advertisement, search result, app-store listing, familiar logo, many reviews or a professional-looking website does not prove authenticity. Links from direct messages, emails, chats, comments or pop-ups must not be used as download sources without checking.

The safe response is to stop contact and installation, independently open the known official project or manufacturer website, and check the domain, publisher, app name, permissions and intended download source. Published signed checksums or software signatures can support verification. They are useful only if the checksum or signing key also comes from an independently trusted source.

A wallet app unexpectedly requesting the seed phrase for supposed synchronization, validation, unlocking or recovery is a strong warning sign. A seed phrase should only be deliberately entered in a trusted recovery process. Updates are not installed through unsolicited support links.

Even technically perfect messages, voices or accounts can be imitated or compromised. Independent verification through a self-chosen channel is decisive. If remote access has already been allowed, software installed or a secret shared, affected devices and accounts should be treated as potentially compromised and secured through clean, independently verified routes.