Scam prevention
Nobody legitimate needs your seed phrase.
Why the recovery phrase is the wallet itself — and the requests that should end a conversation.
CRTrace editorial · 23.10.2026
The phrase is the wallet
A self-custody wallet's recovery (seed) phrase can recreate its private keys on any device. Whoever holds the phrase can move the funds, and blockchain transfers cannot simply be reversed. That is why it should be written down offline, stored securely and never typed into a website or shared with anyone.
Requests that are always a red flag
Support staff, exchanges, investigators and recovery firms have no legitimate reason to ask for a seed phrase, private key or wallet password, or to request remote access to your computer. The same goes for being told to 'validate', 'synchronise' or 'unlock' a wallet by entering the phrase on a linked page. Treat any such request as an attempted theft.
What to do if it has been shared
If a recovery phrase has been exposed, assume the wallet is compromised. Create a new wallet on a trusted device and move any remaining funds to it, then record what happened, including the transaction details, for any report you make. CRTrace will never ask for your phrase at any stage of an investigation.