Secret recovery phrase

Quick answer: A secret recovery phrase is the backup key for a self-custody wallet. Treat it like the wallet itself: if another person or website gets it, the safest assumption is that the wallet is compromised.

In most self-custody wallets, the recovery phrase is a list of words that can recreate the private keys for the wallet. It is not a password reset hint and it is not a customer-support code. It is the underlying backup that proves control of the wallet.

A real wallet may ask you to write the phrase down during setup or restore from it on a new device. A normal support agent, exchange employee, moderator, recovery specialist or advertiser does not need the phrase to investigate a transaction.

Crypto transfers are usually irreversible once confirmed on-chain. If the phrase is exposed, an attacker can import the wallet into their own software and sign transactions without needing your phone, browser extension or exchange login.

This is why many scams begin with a friendly request to “verify ownership,” “sync the wallet,” “validate the account,” or “unlock pending funds.” The language changes, but the goal is the same: move the phrase from your private backup into an attacker-controlled form.

• A website, Telegram account, Discord moderator or email asks for the phrase to fix an error.
• A recovery service says it needs the phrase before it can trace funds or prepare a report.
• A form asks for the phrase together with wallet address, email, phone number or exchange account details.
• The page looks like a wallet interface but was reached through an ad, short link, social post or search result rather than a saved official URL.
• The person creates urgency: “your wallet will be suspended,” “claim expires today,” or “funds are locked until verification.”

1. Never paste the phrase into a website, email, support chat, cloud note or screenshot tool.
2. If you already shared it, stop using that wallet as trusted storage.
3. Move any remaining assets to a newly created wallet from a clean device, starting with the most valuable tokens.
4. Review token approvals and revoke suspicious permissions if assets remain.
5. Save the fake link, chat handles, transaction hashes and timestamps for reporting.

• Assuming a seed phrase is safe because the person asking sounds technical or official.
• Testing a suspicious page with a “small” wallet that still contains approvals or linked accounts.
• Keeping the same phrase after a partial loss because some funds remain.
• Sending more money to a recovery contact who claims the phrase is needed to reverse a transaction.

• Wallet drainer
• Token approval
• Seed phrase request alert
• How to report a crypto scam

This explainer is based on official wallet-safety guidance and consumer scam guidance. It avoids live balance claims and should be refreshed when major wallet vendors change their recovery or support flows.

A secret recovery phrase is the master backup for a self-custody wallet. Anyone who receives it can usually restore the wallet and move funds, so it should never be typed into chats, forms or support tickets.

CryptoRescue treats this explainer as a reader-safety page, not as a promotion or a recovery promise. The practical value is in the definition, common risks, verification steps and safer next actions. If a claim cannot be tied to a source, the page should describe it as a signal or reported pattern instead of a settled fact.

• Compare the wording on this page with the original source or official record.
• Save the exact URL, domain, support handle, wallet address or transaction hash if the topic relates to a possible loss.
• Do not pay a separate unlock, tax, AML, validator, liquidity or recovery fee without independent official confirmation.
• Use the warning checker and transaction lookup when the page mentions a service, wallet, domain or payment trail.

Secret recovery phrase should be read as a source-led safety reference. It does not prove that recovery is possible, that a wallet owner has been identified, or that a service is safe because one warning list has no match. Crypto cases can change quickly, so readers should check timestamps, official domains and the latest linked source before making decisions.

If this page connects to a suspected incident, build a short timeline: first contact, website, payment request, transaction hash, support route and current account state. Then use the CryptoRescue evidence kit, official report portals and exchange or wallet-provider support channels where appropriate.