Fraudulent approaches to crypto estates

Families dealing with a possible crypto estate are often approached by strangers offering help. The assets are invisible, the relatives are looking for answers, and most fraudulent approaches around a crypto estate follow a limited number of patterns. Knowing them protects you.

The patterns

• Fake wallet or exchange support. Someone calls, emails or messages you pretending to be from Ledger, Coinbase or another company, and asks you to “verify” or “secure” the account. Real support never contacts you out of the blue and never asks for passwords or recovery words. Example: “Your wallet has been blocked, click here to verify”, with a link to a fake login page.

• Fake recovery companies. A company contacts you after a death and promises to “get the crypto back”, often before you have contacted anyone yourself. Be extremely cautious with unsolicited approaches, especially when someone claims to have already found assets or asks for payment in advance; verify every party independently through official contact details and relevant registers. Example: “We found your loved one’s wallet and can recover it for a fee.”

• Sponsored phishing links. Search results that look like the official website of a wallet or exchange but are not. The address in the browser bar differs slightly, for example “ledger-secure.com” instead of “ledger.com”.

• Requests for secret access information. Anyone who asks for the seed phrase, private key, password, PIN, wallet file or authentication code (“to check”) is asking for the keys to the wallet. No legitimate person or company asks for them before the situation is examined; a verified specialist may need certain material later, within a documented engagement, and never before authority is established and the specialist is verified.

• Fees before any work. Upfront “unlock”, “release”, “tax” or “insurance” fees before any work is done.

• Guarantees. Promises of access or results. A guarantee is a warning sign, not a reason to trust.

• Fake reversals. “We recovered it, pay the release fee” without a verifiable result. You are asked to pay again for something you cannot see. A visible balance in a wallet you control is not by itself proof that funds were really recovered. Independently check the transaction, the network and the asset — and where applicable the contract address — before you pay or act.

• Fake numbers. Support numbers that are not the official numbers on the official website.

The warning combination: pressure and secrecy

Pressure (“immediate payment, or the money is lost”), secrecy (“tell no one”), and payment in crypto to an unknown address together are strong warning signs. Do not let an unknown party force you into immediate action. If a deadline is mentioned, verify it independently through the official platform, protocol or a competent legal professional before acting.

How trustworthy professionals behave

They do not ask for secret access material as standard or in advance; if specific material is necessary for specialist technical recovery, what is needed, why, within which authority and how it will be handled securely is clearly recorded in advance. They never guarantee outcomes, state scope and fees in writing, work within legal authority, and can be verified on their official domain (typed, not clicked from a message).

How to verify who you are dealing with

Type the official domain yourself in the address bar, never click a link from a message or email. Check the company’s registration, history and described field of work. Check the official support pages, and confirm the person’s identity and role through the official channel. When in doubt, stop and ask the estate’s lawyer or notary.

For the official channels of the main exchanges and wallets, see official channels and source verification.

What you never do

Never send secret access information by email, messages or forms to someone who asks for it, and do not enter it just because a website or app looks trustworthy. First check in the wallet’s current official documentation whether entering this material is actually part of the recovery or import procedure. Then use only the independently verified official app, the device, an official web recovery environment, or — within an assignment defined in writing in advance — a controlled specialist recovery environment. Do this only after authority is confirmed and only when you are certain it is genuine: fake apps and fake support pages are widespread. When in doubt, enter nothing. A request to pay extra money to “unlock” or “release” funds is an important warning sign. Network or gas fees, and costs for unstaking or withdrawing, can occur in a genuine transaction. Always verify such costs through the official website, app or wallet, and do not pay to a random address someone sends you by message.

If you are targeted

Stop all contact. Do not pay. Report to the relevant authorities and the platform involved. Preserve messages as evidence. National authorities differ by country, for example the UK’s Financial Conduct Authority (FCA) and the US FBI’s Internet Crime Complaint Center (IC3) are the reporting routes in those countries; verify the agency for your country on its official domain. There is no requirement to respond quickly: take the time you need. If something was already typed, sent or paid, see you already made a mistake, what now?.