Scammers pretend to be support staff from a crypto exchange or wallet. They reply to your posts, send you direct messages, or run fake help websites and phone lines. Their goal is to get your recovery words (the secret list of words that controls your wallet), or to get you to send money. No real company will ever ask for your recovery words.
Warning signs
'Support' messages you first, often right after you post about a problem.
They ask for your recovery words, private key, or a screen share of your wallet.
They send you a link to a 'help desk', a form, or an app to 'fix' or 'sync' your wallet.
They say your account is locked and you must act now.
The phone number came from a search ad or a social media comment.
If it already happened
Stop talking to them. Do not click their links.
Reach the company's real support yourself: open its official app, or type its address yourself.
If you shared your recovery words, ask your wallet maker's official support what to do next. Reach them in their own app.
If you signed something in your wallet, check and cancel approvals you do not recognize. Use your wallet's own approvals screen, or type revoke.cash yourself.
Write down what happened while you still remember. Save the wallet addresses, transaction IDs (the long code for each payment), dates, amounts, screenshots, the website or app name, and the chat usernames.
Report it for free. In the US, use the FBI's Internet Crime Complaint Center at ic3.gov and the FTC at reportfraud.ftc.gov. Outside the US, use your country's official fraud-report service. Type the address yourself.