Almost nobody loses crypto to broken cryptography. The mathematics holds; it has held for fifteen years. What fails is the person — and the attacks that work are social, patient and unglamorous.
Understanding the actual mechanisms is more useful than a list of warnings, because the mechanisms repeat. Once you can see the shape of one, you recognise the next before it finishes talking.
1. Getting you to hand over the words
The most common theft, by a wide margin. Since a recovery phrase is the wallet, obtaining it is the whole attack — no malware, no exploit, no hurry.
The delivery varies; the ask does not:
- A “support agent” reached through a search advertisement, a social media reply, or a Discord direct message.
- A security alert saying your wallet is compromised and must be “migrated” or “verified”.
- A fake version of a real wallet’s website, often the top sponsored result for the wallet’s own name.
- An airdrop or giveaway that needs you to “connect and validate” your wallet.
- A convincing app in a phone app store that asks you to import an existing wallet.
The universal defence is a single sentence: no legitimate service ever needs your recovery phrase. Not to verify, restore, migrate, sync, unlock, upgrade or refund. There is no exception, and there is no situation in which the exception applies to you. If you can hold that one rule, this entire category becomes unavailable to attackers.
2. Getting you to sign something
The more sophisticated version, and the one a hardware wallet does not save you from.
Interacting with a decentralised application means signing messages and approvals. A malicious contract asks for a token approval that is unlimited in amount and unlimited in time. You approve it because approving things is normal. The contract then drains that token whenever it likes — possibly weeks later, long after you have forgotten the site existed.
Your device dutifully signed it, because you told it to. It verifies that you approved, not that approving was sensible.
Defences: keep a separate hot wallet for anything that touches applications, read what you are signing rather than the site’s description of it, and periodically revoke old approvals.
3. Substituting the destination
Malware that watches the clipboard and swaps a copied wallet address for the attacker’s. You paste what you believe you copied. The addresses are long and unmemorable, so nobody notices.
A related variant, address poisoning, needs no malware at all: the attacker sends you a worthless transaction from an address engineered to share the first and last few characters of one you use often. Later you copy the address from your own history — and take the wrong one.
Defence: verify the address on your hardware wallet’s own screen, which malware cannot alter, and check the middle characters rather than only the ends.
4. Attacking the account around the wallet
If your funds sit on an exchange, the keys are not yours and the attack surface is your login. SIM swapping — persuading a mobile carrier to move your number to the attacker’s device — defeats SMS two-factor authentication and, through it, password resets.
Defence: an authenticator app or a hardware security key rather than SMS, and a carrier account PIN. Or hold your own keys, which removes the account from the equation entirely.
5. Knowing that you own crypto
The category people never plan for. Your keys can be perfectly secured while the fact that you hold crypto leaks — and that fact is what invites extortion letters, targeted phishing and, at the extreme, violence.
It is not hypothetical. Ledger’s 2020 breach put roughly 272,000 customers’ names, phone numbers and home addresses into public circulation. What followed included extortion demands and attempted home invasions. A secure element does not help with any of that.
Defence: buy hardware direct with minimal personal data, consider a delivery address that is not your home, and do not discuss holdings publicly or with people who cannot keep it to themselves.
6. Taking money from people already robbed
“Recovery services” that promise to trace and return stolen crypto, for a fee paid up front. They cannot. Blockchain transactions are final, and no private company can reverse one.
These operations find victims by monitoring exactly the places people go after a theft. It is a second robbery aimed at the same person on their worst day, which is why it deserves its own page rather than a bullet point.
The pattern underneath
Every mechanism above works by getting you to take an action: reveal something, approve something, paste something, or trust someone. None of them attack the cryptography, because the cryptography is the part that works.
Which gives you a usable filter. Legitimate crypto activity is boring, unhurried, and initiated by you. Urgency, unsolicited contact, and any request for your recovery phrase are the three reliable signals — and the third one is decisive on its own.
Including here: no page or tool on SteelPhrase will ever ask you to enter a recovery phrase, and any site that does is either careless or robbing you.