Home › Knowledge Hub › Verify crypto support accounts
How to verify a crypto support account on social media
If you post a crypto problem on X, Instagram, Facebook, Telegram, Discord, or a YouTube comment and a support account replies or messages you, verify it before trusting it, because real support rarely begins with an unsolicited private message after a public post. Use one routine every time: leave the message, find the company's official website yourself, use the support path listed there, and never share a recovery phrase, password, or screen. A verified badge, a matching name, or a helpful tone proves nothing.
The pattern that gives it away
Across every platform, the same thing happens: you mention a wallet or exchange problem in public, and within minutes a friendly "support" or "help desk" account appears, often by private message. That timing is the tell. Legitimate support is something you go to through official channels; it does not monitor public posts and slide into your messages. If you did not initiate the contact, treat it as suspect, whatever it looks like.
This is the social-media-wide version of the fake-support trap. For the specific mechanics of how it plays out on Telegram and Discord, including fake "wallet validation" bots, see our guide to fake crypto support on Telegram and Discord. This page is the general verification routine and how to report impostors on the major platforms.
The verification routine, every time
One routine works on every platform, and it does not require you to judge whether a specific account is real.
1. Leave the message where it is. Do not reply yet, do not click its links, do not call its numbers.
2. Find the official website yourself. Through your own search or a bookmark, not a link in the message or a social profile. Confirm you are on the real domain.
3. Use the official support path listed there. A help centre, a support ticket, an in-app contact. Reach the company the way the company says to, on a channel it controls.
4. Never share secrets or grant access. No legitimate support ever needs your seed phrase, private key, password, two-factor codes, or remote control of your device. A request for any of these ends the conversation.
5. If something is wrong, report the impostor (below) rather than engaging with it.
Because you reach support through a channel the scammer does not control, it does not matter how convincing their account is. The impostor can only work the channel they contacted you on.
Why the usual "proof" fails
Social platforms give impersonators plenty to hide behind.
A verified badge can be bought, transferred, or faked, and on several platforms a paid checkmark no longer means a vetted identity. A matching name and avatar are trivial to copy, often with a single altered character. Comments and replies praising the account can be bots or the scammer's own accounts. Paid search and social ads can put a fake support site or account above the real one. And a large follower count can be purchased. None of these is verification. The only thing that is, is reaching the company through its own official channel.
| Looks like proof | Why it isn't |
|---|---|
| A verified checkmark | Can be bought, transferred, or faked |
| An exact name and logo | Trivial to copy, sometimes with one changed character |
| Replies confirming they helped | Often bots or the scammer's own accounts |
| Top of search or a promoted post | Paid placement, not legitimacy |
| Thousands of followers | Can be purchased in bulk |
Capture evidence before you report
Before reporting an impersonating account, screenshot it: the profile and its handle, the message you received, any links or addresses it sent, and the timestamp. This both supports your report and preserves a record if funds were involved. Our evidence checklist covers what to keep.
How to report an impersonator
Each platform has an official way to report impersonation, reached through the app, not through a direct message:
- X: report the account, then use the impersonation report flow.
- Instagram and Facebook: report the profile and choose the impersonation or scam category.
- Telegram: report the account or message as a scam from its profile.
- Discord: report the user and, if it is a server issue, alert the real server's admins through the official server.
- YouTube: report the channel or comment for spam or impersonation.
Reporting to the real company helps too; many exchanges and wallets maintain a page for reporting fake support and phishing. Use the official website to find it.
If you already shared something
If you entered your seed phrase or private key anywhere, assume the wallet is compromised and move any remaining funds to a new wallet with a fresh recovery phrase immediately; our guide on an exposed seed phrase covers it.
If you gave a password or code, change it now and secure the account, starting with your email.
If you granted remote access, disconnect the device, remove the remote-access software, and have the device checked before logging into anything sensitive.
Then preserve evidence, report it, and be ready for a follow-up recovery scam.
Red flags
- A support account that messages you first after a public post
- A reply arriving within minutes of your mentioning a problem
- Being moved from a public thread into private messages
- Any request for your seed phrase, private key, password, or codes
- A request to install screen-sharing or remote-access software
- A link to "verify", "validate", "sync", or "restore" your wallet
- A verified badge or follower count used as the reason to trust it
What this guide cannot do
It cannot vet individual accounts for you, and impersonators change handles and avatars constantly. What it can do is give you a routine that makes vetting unnecessary, reach support your own way, through the official channel, and never share your phrase or screen, so the quality of the fake stops mattering.
This is general information, not financial or security advice.
Use Chain Pursuit's free tools to understand your options, preserve evidence, and identify possible recovery scams. Do not share your seed phrase or private keys with anyone.
Sources
Federal Trade Commission, What To Know About Cryptocurrency and Scams. https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-and-scams, on impersonation of support and businesses and the rule that legitimate services do not ask you to pay or hand over access unexpectedly.
Cybersecurity and Infrastructure Security Agency, Avoiding Social Engineering and Phishing Attacks. https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks, on unsolicited contact and credential or remote-access requests as the core of social-engineering fraud.
Platform impersonation-reporting steps change over time; use each platform's current official help pages for the exact flow. The rule that no legitimate support requests a recovery phrase is standard guidance from every major wallet and exchange. Reviewed quarterly.
Frequently asked questions
Will MetaMask, an exchange, or a wallet contact me on Instagram or X?
Not out of the blue after you post a problem. Real support is reached through official channels, not by unsolicited private messages that appear when you mention an issue. If a "support" account messages you first, treat it as an impostor and reach the company through its official website instead.
The support account has a verified checkmark. Can it still be fake?
Yes. On several platforms a checkmark can be bought or transferred and no longer means a vetted identity, and badges can be faked outright. A verified badge is not verification. The only reliable check is reaching the company through its own official support channel, not through the account that contacted you.
What should I send crypto support?
Only what a legitimate ticket asks for through the official channel, which never includes your seed phrase, private key, password, two-factor codes, or remote access to your device. Any "support" asking for those is trying to steal from you. Share a transaction hash or account email if the official process requests it, never your secrets.
Is it safe to screen share with crypto support?
No. No legitimate support needs to control or view your screen, and once connected they can capture what you type and operate your wallet. Never install screen-sharing or remote-access software at the request of someone claiming to be support.
How do I report a fake support account?
Use the platform's official report flow from within the app, not a direct message: report for impersonation or scam on X, Instagram, Facebook, Telegram, Discord, or YouTube. Screenshot the profile, handle, message, and any links first. Reporting the impostor to the real company through its official site also helps.
A "support" account sent me a link to validate or restore my wallet. Should I?
No. There is no legitimate tool that needs your recovery phrase to validate, restore, sync, or migrate a wallet, and entering it hands over your funds. Do not use the link. Reach the company through its official website, and report the account.
A 'support' account asked for access or your phrase?
Eleven questions on what to do now and how to secure what's left.
Check my case