Crypto support impersonation is an industrial-scale operation. Scammers monitor social media, Discord, and support-request comments for anyone asking about a wallet or exchange issue. Within minutes you'll get DMs from accounts posing as 'support' — each a coin-flip away from emptying your wallet.
How Real Support Actually Works
Initial contact
Real support never DMs you first. You contact them through the app, official website, or verified channel. If someone reached out to you, it is not support.
Channels
- In-app ticket system — Coinbase, Kraken, Binance, Gemini operate primarily through ticketing.
- Verified X accounts — only to acknowledge and direct to a ticket. Real support won't resolve via DM.
- Phone support — Coinbase offers it; you call their published number.
- Official email domain — verify exactly (support@coinbase.com, not support@coinbase-help.com).
What they never do
- Ask for your seed phrase. Under any circumstance.
- Ask you to connect your wallet to a 'verification' website.
- Ask you to download remote assistance software.
- Ask for your password or 2FA code.
- Request payment to process an issue.
- Send DM links to a 'secure portal.'
The Phishing Playbook
The helpful DM
You post in Discord about a stuck transaction. Minutes later, 'MetaMask Support' or 'Coinbase Help' DMs offering to fix it. Every major wallet has confirmed they do not DM users.
The Google ad
You search 'Coinbase support phone number.' Top result is an ad — for a scam call center that walks you through 'verification' (handing over your seed).
The verification site
'To resolve your issue visit walletconnect-secure[.]com and enter your seed phrase.' Site looks clean, has SSL. Entering hands over the wallet.
The remote desktop
'Let me connect and fix it.' Remote access = copied seed files, keyloggers, direct drain while you watch.
Verifying Real Support
- Initiate contact yourself through the official app or site.
- Check the URL carefully. coinbase.com is real; coinbase-support.com is not.
- Verify X handle. Real ones have blue check and long history.
- Never follow a link from DMs. Type from memory or a bookmark.
- Call the number from the official site. Never trust numbers from ads or DMs.
Specific Scenarios
MetaMask 'support'
MetaMask has no one-on-one DM/email/phone support. Help is entirely self-service at support.metamask.io. Anyone claiming otherwise is impersonating.
Ledger 'support'
Ledger operates a support portal at support.ledger.com. After the 2020 customer database breach, treat all unexpected Ledger communications as suspicious.
Exchange phone 'support'
Coinbase's number is at coinbase.com/contact — use only that. A 'support' call you didn't initiate is almost certainly a scam, often tied to a SIM-swap attempt.
If You Already Engaged
- Seed phrase shared: treat the wallet as compromised. Move remaining funds to a new wallet on a clean device. See first 72 hours.
- Approved a transaction: revoke approvals via revoke.cash. Move funds.
- Remote access granted: disconnect, image the drive if possible, assume every password is compromised.
- Payment sent to 'support fee': file IC3 report, contact bank about chargeback if by card/transfer.
Bottom Line
Legitimate support is reactive (you contact them), documented (ticket numbers, official domains), and patient. Anything proactive, urgent, or seed-phrase-related is theft. When in doubt, close the DM and contact the company through their official website on your own terms.