Paste a message, email or direct message and this names the techniques inside it. Crypto scams are not creative: the same dozen patterns repeat because they work, and seeing them labelled is usually enough to break the spell. Nothing you paste leaves your browser.
This page will never ask for a seed phrase, a private key or a wallet connection, and nothing you type here leaves your browser. It all runs on your own device. If any site, person or app asks for your recovery phrase in order to help you, that is the attack, not the help. There is no legitimate reason for anyone to need it, including support staff, wallet developers, exchanges, police or a recovery service.
What this does. Paste a message you have been sent and it names the techniques in it. Crypto scams are not creative: the same dozen patterns appear over and over because they work. Seeing them labelled is usually enough to break the spell, which is the entire point of the page.
You will meet these repeatedly. Recognising one is enough to stop, and stopping is the whole defence, because every one of these scams needs you to act quickly.
Nothing. Do not reply, do not click, do not press the button that says unsubscribe. Replying at all confirms a real person is reading, which moves you onto a better list. Block and delete. If it claims to be from a service you use, open that service the way you normally do and check there.
Three questions answer almost all of them. Did they contact you first? Real support never does. Are they creating urgency? A genuine problem is still a problem tomorrow. Are they asking for your recovery phrase, or asking you to connect or verify a wallet? Nothing legitimate needs either. If the answer to any of those is yes, you have your answer without needing to analyse the wording at all.
No. It is close to conclusive on its own. Wallet developers, exchanges and platforms do not open conversations with users, and they never do it in direct messages. Scammers watch public channels for anyone posting a problem and reach out within minutes, which is why the timing feels helpful. If you did not raise a ticket, nobody is answering one.
No, and this catches people out. Any reply confirms a real person reads that address or account, which makes it more valuable and moves it onto better lists. The same applies to unsubscribe links in scam emails, which are often just delivery checks. Block and delete without engaging.
No. Sender names, email addresses and social handles are trivially faked, and lookalike domains swapping one character are standard. Judge a message on what it asks you to do rather than on who it claims to be from. Nothing legitimate ever asks for a recovery phrase.
It means it does not use the wording that scams usually use, which is not the same thing. A careful scammer avoids all of it. Fall back on the rules that hold regardless: nobody legitimate contacts you first, nobody needs your recovery phrase, nothing genuine has to happen right now.
No. The analysis runs entirely in your browser on your own device. Nothing is transmitted, stored or logged, and there is no account and no tracking on this page. You can disconnect from the internet and it will still work.
We seal the list every week and keep re-checking every token on it, so you can see what actually happened to them rather than only what is trading today.
