I typed my seed phrase into a site or app
The phrase is the wallet. Assume it is already in somebody else's hands, including for every account it ever created.
- Create a new wallet on a device you trust, now New phrase, written on paper, never typed into anything. If a hardware wallet is available, use it. Do not reuse the old phrase for anything, ever.
- Move the most valuable asset first Not the first in the list — the one worth the most. Drainers watch pasted phrases automatically and empty in seconds, so assume a race. Staked, locked or vesting positions may be unmovable. Take what moves.
- Check every address that phrase created One phrase generates addresses on many networks and several account slots. All of them are compromised, including chains you have never used and accounts you forgot existed.
- Move NFTs and unusual tokens too They are frequently taken later, after the obvious balances, because they take longer to sell.
- Do not send more to the old address to pay for gas It will be taken. If a transfer needs fees, some networks allow a sponsor or a relayer; otherwise that asset stays where it is.
- Assume every device involved is suspect If the phrase was typed on a computer or a phone, scan it, and do not create the new wallet there.
The hard part
There is no revocation for this and no password to change. A recovery phrase is not a credential that can be reset — it is the private keys, in words. Whoever has it has the same power over the wallet that you do, permanently, and the only defence is emptying it faster than they do.
How it happened, so it does not happen twice
Real wallets ask for the phrase once, when you create or genuinely restore one. Never to verify, sync, migrate, unlock, connect, claim or fix. Any other moment is a theft in progress, whatever the page looks like — clones explains why the page looked perfect.
If the wallet is already empty
If your funds are gone covers the first hour and what reporting achieves. Ignore everyone who contacts you afterwards offering to help — the second scam is aimed precisely at this moment.
Anyone who contacts you offering to recover this is the next thief
It follows losses within days, sometimes hours, and it copies the names of real firms, regulators and police units. Nobody legitimate finds you first. How the recovery scam works →
Last checked 19 Oct 2026. This page is procedure, not legal advice — what a report achieves depends on where you live.