Legitimate support should not need your seed phrase, private key or wallet recovery secret to troubleshoot an account. Requests for those secrets are a critical warning sign, especially when combined with urgency, remote-access requests or unofficial contact channels.
Secrets that should stay offline
- Seed / recovery phrase
- Private keys
- Full account password + 2FA codes shared together in chat