{"id":52810,"date":"2024-12-23T04:22:14","date_gmt":"2024-12-23T09:22:14","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=52810"},"modified":"2024-12-23T04:22:14","modified_gmt":"2024-12-23T09:22:14","slug":"cryptowallet-free-seed-phrase-scam","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/cryptowallet-free-seed-phrase-scam\/52810\/","title":{"rendered":"You found a seed phrase from someone else&#8217;s cryptowallet: what could go wrong?"},"content":{"rendered":"<p><em>\u201cI have a question. I have USDT stored in my wallet, and I have the seed phrase. How to transfer my funds to another wallet?\u201d<\/em> \u2014 we found a comment like this under a finance-related video on YouTube. And the seed phrase was revealed in full in the comment.<\/p>\n<p>This looked suspicious: even a complete cryptocurrency beginner should know better than to share their seed phrase with the entire world. We were wary, and for a good reason \u2014 this comment turned out to be a scam.<\/p>\n<p>Keep reading to find out what can go wrong if you somehow come across someone\u2019s seed phrase\u2026<\/p>\n<h2>\u201cI give you the seed phrase, and you help me transfer my money to another wallet\u201d<\/h2>\n<p>Let\u2019s start with the basics. A seed phrase is a randomly generated unique sequence of dictionary words that together form a phrase needed to recover access to a cryptowallet. When someone shares their seed phrase \u2014 essentially the key to their wallet \u2014 it looks extremely suspicious. We then discovered similar comments, each containing the same recovery phrase and a request for help transferring funds to another platform. Notably, all these messages were posted from newly created accounts.<\/p>\n<div id=\"attachment_52816\" style=\"width: 1438px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/12\/23042017\/cryptowallet-free-seed-phrase-scam-01-EN.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-52816\" class=\"size-full wp-image-52816\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/12\/23042017\/cryptowallet-free-seed-phrase-scam-01-EN.jpg\" width=\"1428\" height=\"229\"><\/a><p id=\"caption-attachment-52816\" class=\"wp-caption-text\">In similar comments written from newly created accounts, supposedly \u201ccrypto newbies\u201d generously share their seed phrases<\/p><\/div>\n<p>Now, let\u2019s imagine for a second that someone reading one of these comments is a little unscrupulous and, instead of helping the newbie, decides to take a peek inside the wallet (after all, they have the key). Upon opening the wallet, they\u2019re pleasantly surprised to find it stuffed with USDT: a TRC20 token on the TRON network tied to the value of the US dollar. The wallet contains the equivalent of eight thousand dollars. Well, what to do next? The correct answer would be to remember that there\u2019s no such thing as a free lunch, and steer well clear of the wallet.<\/p>\n<div id=\"attachment_52815\" style=\"width: 522px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/12\/23041923\/cryptowallet-free-seed-phrase-scam-02.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-52815\" class=\"size-full wp-image-52815\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/12\/23041923\/cryptowallet-free-seed-phrase-scam-02.jpg\" alt=\"Finding several thousand US dollars in someone else's wallet looks like a lucky chance to get rich for a immoral person\" width=\"512\" height=\"822\"><\/a><p id=\"caption-attachment-52815\" class=\"wp-caption-text\">Finding several thousand US dollars in someone else\u2019s wallet looks like a lucky chance to get rich for a immoral person<\/p><\/div>\n<p>However, the scam assumes that our nefarious passerby will want to appropriate all or at least part of the cryptocurrency. But to withdraw USDT, a small fee must be paid in another currency: TRX (the TRON cryptocurrency token). Unfortunately, the wallet doesn\u2019t have enough TRX, so the thief tries to transfer TRX from their own personal wallet \u2014 only to discover that the tokens they transferred immediately ended up in a completely different, third wallet.<\/p>\n<div id=\"attachment_52814\" style=\"width: 522px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/12\/23041840\/cryptowallet-free-seed-phrase-scam-03.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-52814\" class=\"size-full wp-image-52814\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2024\/12\/23041840\/cryptowallet-free-seed-phrase-scam-03.jpg\" alt=\"The list of transactions details the scammers' earnings\" width=\"512\" height=\"822\"><\/a><p id=\"caption-attachment-52814\" class=\"wp-caption-text\">The list of transactions details the scammers\u2019 earnings<\/p><\/div>\n<p>The catch is that the bait is set up as a <a href=\"https:\/\/www.investopedia.com\/multi-signature-wallets-definition-5271193\" target=\"_blank\" rel=\"nofollow noopener\">multi-signature<\/a> wallet. To authorize outgoing transactions in such wallets, approval from two or more people is required, so transferring USDT to a personal wallet won\u2019t work \u2014 even after paying the \u201ccommission\u201d.<\/p>\n<p>So, the scammers are impersonating beginners who foolishly share access to their cryptowallets, tricking equally naive thieves \u2014 who end up becoming the victims. In this scenario, the scammers are something like digital Robin Hoods, as the scheme primarily targets other crooked individuals. But this twist is nothing new \u2014 we\u2019ve <a href=\"https:\/\/www.kaspersky.com\/blog\/cryptowallet-seed-phrase-fake-leaks\/51607\/\" target=\"_blank\" rel=\"noopener nofollow\">previously covered a much more elegant crypto fraud scheme<\/a>, also aimed at unprincipled people.<\/p>\n<h2>How to protect yourself from crypto scams<\/h2>\n<p>The way to protect against the above-described scam is quite simple: just be a decent person and don\u2019t try to get into other people\u2019s cryptowallets \u2014 even if the seed phrase is left in the comments <a href=\"https:\/\/www.youtube.com\/%40Kaspersky\" target=\"_blank\" rel=\"nofollow noopener\">of your favorite YouTube channel<\/a> or even slipped under your front door.<\/p>\n<p>In all other cases, crypto asset owners can follow these universal tips and recommendations:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.kaspersky.com\/blog\/tag\/cryptocurrencies\/\" target=\"_blank\" rel=\"noopener nofollow\">Learn about the latest scams<\/a> aimed at stealing cryptocurrency to stay aware of current trends.<\/li>\n<li>Secure your devices with <a href=\"https:\/\/www.kaspersky.com\/lp\/crypto-security?icid=gl_kdailyplacehold_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team______\" target=\"_blank\" rel=\"noopener nofollow\">reliable protection<\/a>.<\/li>\n<li>Double-check any information received from strangers: scammers can pose both as beginners in the crypto world or as experienced trading sharks.<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"premium-crypto-generic\">\n","protected":false},"excerpt":{"rendered":"<p>Scammers have invented a new trick \u2014 they post cryptowallet seed phrases in YouTube comments using newly created accounts. Here&#8217;s how it works<\/p>\n","protected":false},"author":2513,"featured_media":52811,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2683],"tags":[1035,2640,4481,80,187,76,726,422,131],"class_list":{"0":"post-52810","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-blockchain","9":"tag-cryptocurrencies","10":"tag-cryptowallet","11":"tag-fraud","12":"tag-passwords","13":"tag-phishing","14":"tag-scam","15":"tag-threats","16":"tag-tips"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/cryptowallet-free-seed-phrase-scam\/52810\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/cryptowallet-free-seed-phrase-scam\/28405\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/cryptowallet-free-seed-phrase-scam\/23664\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/cryptowallet-free-seed-phrase-scam\/28537\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/cryptowallet-free-seed-phrase-scam\/27891\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/cryptowallet-free-seed-phrase-scam\/30688\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/cryptowallet-free-seed-phrase-scam\/38833\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/cryptowallet-free-seed-phrase-scam\/13080\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/cryptowallet-free-seed-phrase-scam\/22499\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/cryptowallet-free-seed-phrase-scam\/23504\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/cryptowallet-free-seed-phrase-scam\/31866\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/cryptowallet-free-seed-phrase-scam\/28659\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/cryptowallet-free-seed-phrase-scam\/34492\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/cryptowallet-free-seed-phrase-scam\/34116\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/fraud\/","name":"fraud"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/52810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2513"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=52810"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/52810\/revisions"}],"predecessor-version":[{"id":52813,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/52810\/revisions\/52813"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/52811"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=52810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=52810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=52810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}