Home › Knowledge Hub › Fake support accounts
Fake support accounts that reply when you post about a problem
Post publicly that your wallet is stuck or your exchange withdrawal failed, and a friendly support account often replies within minutes. It is almost always fake. Scammers monitor public posts for people in trouble, reply from a look-alike handle, move you to a private message, and steer you toward a seed phrase or a drainer. This guide explains how fake support accounts on X, Facebook, Instagram, and Reddit operate, and how to reach the real support instead.
The moment you post about a crypto problem in public, you have told scammers two things: that you hold crypto, and that you are stressed and looking for help. Fake support accounts are built to arrive in exactly that moment, because a worried person who was just offered help is far more likely to follow instructions than a cautious one who went looking.
How they find you
These accounts monitor public posts for the names of wallets and exchanges and for distress words like stuck, failed, locked, or help. On X, Facebook, Instagram, and Reddit, a reply or a direct message can land within minutes of your post. The speed is not a sign of good service. It is automation watching for the keyword you just typed.
What the account looks like
The handle imitates the real one: an extra letter, an underscore, a swapped number, "support" or "help" bolted onto the brand name, a copied avatar and banner. The profile may show a blue badge paid for rather than earned, and a feed padded with reposts to look established. At a glance in a stressful moment, it reads as official. Side by side with the genuine account, the handle never quite matches.
The script, step by step
- A fast, friendly public reply. "So sorry to hear that. Our support team can help, please DM us." The goal is only to move you off the public thread, where others might warn you.
- The move to private. In the DM, the tone is reassuring and professional. You may be sent to a "support portal" or a "validation" site, which is a cloned page as described in our guide on cloned websites and fake social proof.
- The ask that ends it. One of a few requests appears: enter your seed phrase or recovery phrase to "sync" or "restore" the wallet; connect your wallet and approve a transaction to "validate" it; or pay a small "unlock" or "verification" fee. Each one hands over your funds.
Real support never does any of this. It does not ask for your seed phrase, it does not message you first offering to fix a problem you posted about, and it does not ask you to approve a transaction to prove ownership.
How to reach real support
- Start from the official app or website, not a reply. Open your exchange or wallet by an address you already know, and use the support or help option inside it. Let support come from you, not to you.
- Assume any unsolicited "support" reply or DM is fake, especially a fast one. Do not click its links and do not continue in the DM.
- Check the handle against the verified account, reached independently. Compare character by character; look-alike handles are the whole trick.
- Never share your seed phrase, and never approve a transaction to "validate" a wallet. No support process requires either. If you are unsure what a prompt does, close it.
- Post less detail while you wait. You do not need to name the exact wallet and amount publicly; that is what draws the accounts.
If you already engaged one
If you shared your seed phrase or recovery phrase, treat the wallet as compromised and act now: our guide on what to do if your seed phrase is exposed covers the order. If you connected your wallet and approved something, move any remaining assets to a new wallet and revoke approvals using a tool you reach by typing the address yourself. Preserve the profile, the handle, the messages, and any links or transactions, then report the account to the platform and the impersonation to the real brand.
Red flags
- A support or help account that replied to your public post, especially within minutes
- A handle that is close to the official one but not an exact match
- Being moved quickly from a public thread into a private message
- A link to a "support portal" or "validation" site you did not seek out
- Any request for your seed phrase, a wallet connection to "validate," or an unlock fee
What this guide cannot do
It cannot tell a real reply from a fake one by tone, because the fakes are polite and professional by design. What it can do is change where help comes from: when you start support yourself from the official app, an unsolicited reply offering to fix your problem is automatically suspect, whatever it says.
This is general information, not legal or financial advice.
Use Chain Pursuit's free tools to understand your options and preserve evidence. Never share your seed phrase, private keys, passwords, or one-time codes with anyone.
Sources
Federal Trade Commission, How To Avoid a Scam and consumer alerts on impersonation of companies and support. https://consumer.ftc.gov, on fraudsters posing as a company's support to reach people seeking help.
Federal Bureau of Investigation, Internet Crime Complaint Center, 2025 Internet Crime Report. https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf, which documents impersonation and tech-support fraud among reported schemes.
Cybersecurity and Infrastructure Security Agency, Secure Our World. https://www.cisa.gov/secure-our-world, on verifying contacts through official, independently reached channels.
The behaviour described here, keyword monitoring, look-alike handles, and the move to private messages, is consistent across the sources above and our own reviewed guides. Reviewed quarterly.
Frequently asked questions
A support account replied to my post within minutes. Isn't that just good service?
Almost always it is a fake. Scam accounts monitor public posts for wallet and exchange names and distress words, and reply fast to catch you while you are worried. Real support does not watch public posts and message you first offering to fix them. Start support yourself from the official app.
The account has the brand's name, logo, and a blue badge. Is it official?
Not necessarily. Logos and banners are copied, and a badge can be paid for rather than earned. Compare the handle character by character against the verified account reached independently; look-alike handles with an extra letter or underscore are the trick.
They asked me to enter my seed phrase to sync or restore my wallet. Normal?
Never. No support process needs your seed phrase or recovery phrase. Entering it hands over the wallet. Close the page and do not share it with anyone.
They want me to connect my wallet and approve a transaction to validate it. Safe?
No. "Validating" a wallet by approving a transaction is how a drainer gets permission to move your assets. Genuine support never asks for this. Do not approve anything you cannot read.
They moved me to a DM and sent a support portal link. Should I use it?
No. The move to a private message is to get you away from people who might warn you, and the portal is typically a cloned page. Do not click it. Reach support only from inside the official app or website.
I already shared my recovery phrase with one. What now?
Treat the wallet as compromised and act immediately. Move any assets you still can to a brand new wallet, and follow our guide on an exposed seed phrase. Then preserve the account and messages and report the impersonation.
A support account asked for something. Was it real?
Eleven questions that show what to do next and how to preserve the evidence, with no email required.
Check my case