Phantom will never reach out to you first, ask for your secret recovery phrase, or request that you send assets. If you receive a message that does any of these things, it’s a scam. This article explains how scammers operate, what to watch for, and how to protect yourself.
Common scam tactics to watch out for
Scammers can be creative, often pretending to be part of the Phantom team or support staff. Here’s how they usually try to trick people:
Fake social media profiles
Scammers create fake accounts impersonating Phantom Support. They often message users directly and ask them to verify or migrate their wallets using malicious links like:
“Hi there! I’m Olivia from Phantom Support. We’ve detected unusual activity on your wallet. Please migrate your funds using this secure tool: phantom-wallet-verification.net”
Phishing emails or DMs
Scammers send fake support messages by email or direct message (DM), often with alarming subject lines:
"Subject: Phantom Wallet Alert - Action Required
Your wallet is at risk of being frozen. Please click the link below to verify your identity and restore full access."
If you didn’t submit a support request at help.phantom.com, delete the message and mark it as spam.
Fake websites mimicking Phantom
Scammers may direct you to websites that look like Phantom’s but use deceptive URLs, such as phantom-support.io or phantom.app-help.net. These may prompt you to “reconnect your wallet” or “verify ownership.”
Messages about compromised wallets
Any message that says your wallet has been flagged or compromised and asks you to move assets is a scam. Example:
“⚠️ ALERT: Your Phantom wallet has been flagged for suspicious activity. For your safety, transfer your assets to this verified address until we complete our review.”
Fake airdrops, rewards, or recovery promises
Scammers promise rewards or asset recovery to trick you into sending crypto:
“🎉 Congratulations! You've qualified for the exclusive $SOL bonus airdrop. Just send 0.1 SOL to this address to verify your eligibility.”
How Phantom Support contacts you
Phantom Support will only email you if you’ve submitted a request through help.phantom.com. We don’t initiate contact about issues or ask for sensitive information.
If you’ve opted in, Phantom may send occasional marketing or product update emails. These will always come from a verified domain like phantom@updates.phantom.com.
We will never ask for your secret recovery phrase, private keys, or assets — even in marketing messages.
What Phantom will never do
- DM you first on social media.
- Send unsolicited support emails.
- Ask for your secret recovery phrase or private keys.
- Request that you send assets for any reason.
- Tell you to “migrate” your wallet.
What to do if you're targeted
- Don’t respond. Engaging gives scammers more opportunities to pressure you.
- Don’t send crypto. Once it’s sent, it can’t be recovered.
- Report it. Go to help.phantom.com and open a support ticket.
- Block and delete. Mark emails as spam and report fake social media accounts.
How to stay safe
Block DMs from strangers
One of the most common entry points that scammers use is sliding into your direct messages (DMs) on social media. On Discord, go to Content & Social, then Server Settings (on mobile) or Social permissions (on desktop), then turn off the Direct messages. For more information, see Blocking & Privacy Settings in Discord help.
Verify links and email addresses
Look for small spelling changes or added characters.
Remember that all official Phantom communications come from these verified channels:
- Our website and domain name: phantom.com
- Our account on X (Twitter): @phantom
Don't engage with fake Phantom Support
Don’t send assets to anyone claiming they can “safeguard” or “recover” your funds. Legitimate support will never ask you to do this. If something feels off or you’re not sure about a message, reach out to us directly through help.phantom.com before taking any action.
Inspect suspicious tokens
Use blockchain tools to inspect unexpected airdrops or suspicious tokens. For more information, see How to use blockchain explorers and analytical tools to stay safe from scams.