Skip to main content

A beginner wallet-safety lesson

Wallet support asked for your recovery phrase?

Those words are not a customer-service code. Never send them to another person—even someone claiming to help.

Crypto Without Blind Spots · Sources checked

Already shared the phrase? Start here.

What do those words do?

A recovery phrase is a secret set of words used to restore access to some crypto wallets. Someone with it may be able to control the accounts it protects. Wallet designs and recovery methods differ. MetaMask explicitly warns against sharing its phrase with anyone, including its support team. Read MetaMask’s security explanation.

CAUTION: A familiar logo is not proof

Fictional example: A message says your wallet needs urgent attention and asks you to send your backup words to “support.” Treat that request as a serious warning. A name, logo, or helpful tone does not establish who is behind it.

Before sharing anything

  1. Stop interacting with the request. Do not send the words or enter them through the supplied link.
  2. Find the provider independently. Use the support option in your verified wallet app or the provider’s official help website—not the route supplied by the message.
  3. Check that provider’s instructions. MetaMask says it does not initiate support by direct message or email. Existing support tickets can generate email updates; that is different from an unsolicited approach.

Check MetaMask’s official support channels and contact rules. Other providers have their own procedures.

But doesn’t restoring a wallet need those words?

Giving the phrase to a person

Sending it in a message or reading it aloud gives someone else the secret. Do not treat it as proof of identity for a support agent.

Restoring your own wallet

A genuine restoration process can require private phrase entry. Follow verified instructions for your exact wallet and device—not a stranger’s link or directions.

There is no universal rule that words are entered only on a hardware device. For example, Trezor Model One’s standard recovery uses Trezor Suite with prompts confirmed on the physical device. See Trezor’s model-specific instructions. This distinction does not make an unfamiliar app or form trustworthy.

DANGER: Already shared or entered it?

Treat possible exposure as a security incident. Closing the message does not undo disclosure. Stop interacting with the suspected scammer and promptly follow your provider’s official compromised-wallet guidance. Do not wait to finish a book or video.

MetaMask: hacked or scammed account guidance. Use instructions appropriate to your own wallet. This lesson cannot determine whether your funds are safe or promise recovery.

Remember the distinction

Keep the secret private. Find support independently. Follow the right instructions for your own wallet.

Watch “Support? Or a Trap?” on YouTube (40 seconds; opens a new tab).

Want the wider picture of wallets, custody, and crypto risks? Choose the depth that suits you; the guides work independently.

Explore the guides