Fake support, fake apps and Telegram impersonation
No exchange, wallet or project will ever message you first, ask for your seed, or ask you to install remote-access software.
Updated 2026-09-28
Checklist · 4 steps
- Download exchange apps only from links on the exchange's own website.
- Treat any unsolicited message from 'support' as an attack. Go to the official site and open a ticket yourself.
- Never install screen-sharing or remote-access software at anyone's request.
- In Telegram groups, admins never message first. Anyone who does is impersonating one.
The attacker's job is to get you to act under time pressure. 'Your account is at risk, verify now.' 'Your withdrawal is stuck, our agent will fix it on a screen share.' Every version ends with you handing over a seed, a code, or control of your screen.
Fake apps are the quieter version. They sit on app stores with the real exchange's logo and a few thousand fake reviews, and they log your credentials on first login. Install only from a link on the exchange's own site.
⚿