Stay Away from Fake Wallet Scams

What Is a Fake Wallet Scam?

A fake wallet scam involves a malicious app or website that closely imitates a legitimate crypto wallet. Once a user creates or imports a wallet, the fake app secretly captures the recovery phrase or private key and sends it to the scammer.

Because scammers now have full control of the wallet, they can access and steal the assets at any time—often without the victim noticing until it's too late.

How the Scam Works

The typical attack follows four steps:

1. A fake wallet is distributed through unofficial websites, search ads, social media, messaging apps, or third-party APK files.

2. The user installs the fake wallet, believing it is genuine.

3. When the user creates or imports a wallet, the app silently uploads the recovery phrase or private key to the scammer.

4. Once the wallet receives valuable assets, the scammer transfers them out immediately.

Common Signs of a Fake Wallet

Watch out for these red flags:

• The download link comes from a search ad, private message, or someone else's recommendation.

• You're asked to install an APK or app from an unofficial source.

• The website domain looks similar to the official one but isn't an exact match.

• The wallet has few downloads, poor reviews, or an unknown developer.

• Someone pressures you to install a wallet quickly to claim rewards or resolve an issue.

If anything feels suspicious, stop and verify before installing.

How to Protect Yourself

Follow these best practices to avoid fake wallet scams:

• Download wallets only from the official website or trusted app stores.

• Verify the website URL before downloading anything.

• Never install wallet apps or APK files shared through private messages, social media, or chat groups.

• Never share your recovery phrase or private key with anyone.

• If someone tells you to "verify" or "recover" your wallet by entering your recovery phrase, it's a scam.

What to Do If You Installed a Fake Wallet

If you suspect you've used a fake wallet, act immediately.

If you have not imported or created a wallet

• Uninstall the fake app.

• Download the genuine wallet from the official source.

• Avoid using the fake app again.

If you did import or create a wallet

Assume your recovery phrase or private key has been compromised.

1. Create a brand-new wallet using the official app.

2. Transfer all assets to the new wallet as soon as possible.

3. Never continue using the compromised wallet, even if it appears to work normally.

4. Uninstall the fake wallet after your assets have been moved.

Important: A compromised recovery phrase can never be made secure again. The only safe solution is to move your assets to a newly generated wallet with a brand-new recovery phrase.

Security Reminder

TokenPocket will never ask for your recovery phrase or private key.

Always download TokenPocket from the official website or official app stores. If you're unsure whether your wallet is genuine, verify it before importing or creating a wallet.