What impersonation and fake support means
Impersonation and fake support in crypto describes any scam where someone pretends to be affiliated with an exchange, wallet provider, or blockchain project's official help desk. The goal is always the same: get you to hand over something a real support agent would never need, whether that's your password, a one-time login code, or your wallet's seed phrase.
The scam works because crypto users regularly hit genuine friction: a stuck withdrawal, a locked account, a failed transaction, and go looking for help. Impersonating exchange support exploits that exact moment of frustration, when a person is more likely to skip their usual caution just to get a problem solved quickly.
How it works in practice
Most fake support scams start with contact you didn't expect. A reply appears under your own public complaint on social media, a direct message lands in Telegram or Discord claiming to be from the project team, or a call comes in from a number spoofing a company's real support line. In each version, the scammer already knows enough about the platform to sound credible: the product name, common error messages, sometimes even a ticket number copied from a genuine complaint thread.
Once contact is made, the request escalates. First it's your email or username, framed as identity verification. Then it's a screen-sharing session, supposedly to walk through the fix together, which actually lets the scammer see or control your screen. The final ask is the one that matters most: your seed phrase, private key, or a signature on a wallet-connect prompt, presented as the only way to 'restore', 'validate', or 'unlock' your funds. Any of those steps hands the scammer what they need to drain a wallet.
Warning signs to look for
None of these signs on their own proves a scam, but together they describe how nearly every fake support contact plays out:
- Support reached out to you first, rather than you contacting them through a channel you chose.
- You're asked to share a seed phrase, private key, or password, none of which a legitimate support desk ever needs.
- You're pushed to install remote-access or screen-sharing software before any issue has even been diagnosed.
- There's manufactured urgency: an account will be suspended, funds will be lost, or an offer expires within minutes.
- You're asked to connect your wallet or sign a transaction to 'verify', 'unlock', or 'restore' your funds.
What to do if you are targeted
Stop the conversation and share nothing further. A seed phrase or private key already sent cannot be undone, since whoever has it can move funds immediately, so the priority is to stop before that point rather than explain yourself to the person you're talking to.
Go back to the platform through a channel you found yourself, not a link or number the 'support agent' gave you, and confirm whether they contacted you at all. Before you interact with any page claiming to be that platform's help center, run it through a website checker to see whether it matches what's known about the real service. If you already sent funds or connected a wallet to an unfamiliar address, a wallet checker can show what that address has been associated with.
If money is already gone, document the conversation, the wallet address involved, and any links you were sent. That record is what you'll need if you report the incident to the platform itself or to any relevant authority.
How TrustSniffer checks for this
TrustSniffer's approach is evidence-led rather than based on a single red flag. As of the time of analysis, TrustSniffer has published analyses for 5,260 websites, building a reference point for what a genuine exchange or wallet provider's official site actually looks like, which makes it easier to spot a convincing fake.
The same principle applies to wallets. TrustSniffer has assessed 17,264 cryptocurrency wallet addresses, so if a 'support agent' sends you an address to send funds to for verification or unlocking, that history can help flag patterns worth treating with caution before you send anything.
Neither check replaces caution. But pairing a quick look at the website checker with a check of the wallet checker turns a gut feeling into something you can actually verify before you act.
