Blockchain transactions can't be reversed, but you can secure your wallet and prevent further loss. The steps you take depend on how the scam occurred.
If you connected to a malicious site
A malicious app may have received permission to spend your tokens. This often happens through phishing links, fake browser extensions, or scam websites.
What to do
- Go to Settings → Connected Apps and disconnect any unfamiliar apps.
- Revoke token approvals. See Revoke token approvals.
- Create a new wallet and transfer your remaining assets. See Move assets when you need to start over with a new wallet.
- Report the scam. See Report a scam.
If you shared your recovery phrase
If you shared your Secret Recovery Phrase even once, the attacker has full access to your wallet. Common tactics include impersonating Phantom Support or fake apps requesting your phrase.
What to do
- Stop using the compromised wallet immediately.
- Create a new wallet and transfer your remaining assets. See Move assets when you need to start over with a new wallet.
- Report the scam. See Report a scam.
Don't attempt to recover assets in the compromised wallet. Any funds you transfer in can be stolen.
If you don't know how you were compromised
Possible causes include interacting with suspicious airdrops, fake NFTs, phishing sites, or impersonators.
What to do
- Create a new wallet and transfer your remaining assets. See Move assets when you need to start over with a new wallet.
- Scan your device for malware using trusted antivirus software.
- Uninstall suspicious browser extensions or apps.
- Go to Settings → Connected Apps and disconnect any unfamiliar apps.
- Report the scam. See Report a scam.
Stay safe from future scams
Phantom Support will never contact you first, ask for your Secret Recovery Phrase, or request that you send funds. For more on common scam tactics and how to protect yourself, see Phantom will never DM, email, or ask you to send funds.