Unfortunately, transactions made on the blockchain are final and irreversible.

We understand how distressing it can be to experience a phishing attack, scam, or hack. You’re not alone, and we’re here to help you secure your assets and prevent future issues. However, due to the immutable nature of blockchain technology, transactions made on the blockchain are final and irreversible. The decentralized architecture of blockchains ensures that no single entity, including Phantom, has the authority or capability to reverse or block transactions once they have been confirmed.

This inherent security feature is fundamental to the blockchain’s design, promoting transparency and trust within the network. While this decentralization provides significant benefits, it also means that users must exercise extreme caution and vigilance in securing their wallets and transactions.

If you believe you have been targeted by a phishing attack, scam, or hack, we recommend the following immediate steps:

1. Secure Your Account: Change your passwords and enable two-factor authentication (2FA) on all your accounts associated with your wallet.
2. Report the Incident: Report the fraudulent activity to relevant authorities and platforms to help prevent others from falling victim.
3. Monitor Your Wallet: Keep a close eye on your wallet for any unauthorized transactions or suspicious activity.
4. Educate Yourself: Familiarize yourself with common security practices and stay updated on potential threats.

Common Scam Scenarios 

Users can fall victim to scams in various ways, often without realizing it. Understanding these common scenarios can help you identify the issue and take the appropriate next steps.

"I may have connected to a malicious website and I suspect they stole my tokens!"

If you suspect that you have connected to a malicious website which has initiated unauthorized transactions, immediate action is crucial to mitigate further potential losses. Please follow these steps:

1. Disconnect from Malicious DApps:
   • Navigate to Settings > Connected Apps.
   • Select Disconnect All or specifically choose the malicious DApp to disconnect.
2. Revoke Token Approvals:
   • Revoke token approvals to prevent further unauthorized transactions. Learn more or review the steps in this guide on revoking token approvals.

Please note, while these steps may prevent additional unauthorized activity, there is a significant risk that this procedure may not fully secure your wallet. The safest course of action is to create a new wallet and transfer your funds there immediately.

How to Secure Your Assets by Migrating to a New Wallet:

For comprehensive instructions on how to migrate to a new wallet with a new Secret Recovery Phrase, please refer to our migration guide.

"I might have given someone or a website my Secret Recovery Phrase"

If you have shared your 12 or 24-word Secret Recovery Phrase with a scammer or pasted it into a phishing website, it is critical to stop using this wallet immediately. The scammer now has complete control over your wallet and its assets.

Important Security Reminders:

• Never Share Your Seed Phrase: Always be cautious and never trust anyone asking you to share your seed phrase under any circumstances.
• Do Not Enter Your Seed Phrase Online: Never enter your seed phrase on any website. You do NOT need your seed phrase to connect to a website.
• Phantom Support Will NEVER Ask for Your Seed Phrase: Phantom support will never ask you to share your Secret Recovery Phrase.

Immediate Actions:

• Stop Using the Compromised Wallet: Cease all activity with the hacked wallet to prevent further unauthorized access.
• Create a New Wallet: Generate a new wallet with a new Secret Recovery Phrase.
• Migrate Your Funds: Transfer your assets from the compromised wallet to your new wallet as quickly as possible. For detailed instructions on setting up and migrating to a new wallet, please refer to our migration guide.

"I don't know how I got scammed!"

Understanding how a scam occurred can be challenging, but awareness is the first step towards prevention. Here are some common methods scammers use:

• Malware on Your Computer: Your device may be infected with malware such as a key-logger (these can capture keystrokes to steal passwords), clipboard hijacker, or a malicious extension that monitors your activities.
• Phishing Scams: You might have entered your Secret Recovery Phrase into a fraudulent website or app that appeared to be Phantom.
• Fake Phantom Apps: You may have installed a fake Phantom app on your browser extension or mobile device. Always download the official apps directly from the official Phantom website and use links provided there, ensuring URLs are accurate.
• Fake Extensions: Mimic legitimate tools to gain unauthorized access.
• Compromised Seed Phrase: Someone might have accessed your seed phrase from its secure location.

While falling victim to a scam can be distressing, it also serves as a reminder of the importance of cybersecurity. By taking proactive measures, you can protect your assets and stay secure in the future.

Preventative Tips for Safeguarding your Crypto:

• Review connected DApps for suspicious apps.
• Scan/go through your device for malware or extensions.

Practical Steps to Strengthen Your Wallet Security:

• Regularly Scan for Malware: Use trusted antivirus and anti-malware software to keep your devices clean.
• Verify Authenticity: Always ensure you are using the official Phantom app or website. Check URLs and download sources carefully.
• Secure Your Seed Phrase: Store your Secret Recovery Phrase in a secure, offline location and never share it with anyone.

By staying informed and vigilant, you can turn this experience into a learning opportunity and enhance your digital security. For more tips and resources, visit our Security Center. And finally, don't forget, we have an AI Chatbot that can assist you too in a pinch! For example, need help with phishing? Type ‘Help with Scams’ in our chatbot for step-by-step instructions!

Stay safe, and thank you for trusting Phantom with your digital asset management.

Phantom is a user-controlled wallet, we never have access to your seed phrases. If there is anything more you can think of that might shed more light on what happened, we can look into it. Remember, all transactions made on the blockchain are irreversible and difficult to track.  If you have information on phishing websites, fake websites, or any relevant information about the scam, help us by reporting them: How to report a scammer? Don't forget to prepare to provide details such as screenshots, URLs, or transaction IDs. These will help our team to help you more efficiently!