Fake customer support is one of the most common entry points for crypto theft. You post a complaint on Twitter, Reddit, or Discord, and within minutes a “support agent” replies offering help. The “agent” is a scammer who will take over your account.
How the Scam Works
- You have a problem — Exchange withdrawal is delayed, account is frozen, or you just have a question
- You post publicly — “Coinbase support is not responding. My withdrawal is stuck!”
- Scammer replies — Within minutes, @CoinbaseSupport_Help or @Coinbase_Care responds: “Our apologies for the trouble. DM us for help.”
- Phishing link — The scammer sends a link to a fake login page
- You enter your credentials — The scammer now has your exchange login
- Account drained — The scammer logs in, bypasses 2FA (or asks for your 2FA code “for verification”), and steals your funds
How to Spot Fake Support
- Handle is slightly wrong — Real support is verified (blue checkmark), fake support has a dot, underscore, or extra character
- Responses in seconds — Real support takes hours or days
- Asks for your password, 2FA code, or seed phrase — REAL SUPPORT NEVER ASKS FOR THESE
- Sends links to login pages — Real support will never send you a link to log in
- DMs you first — Real support will not initiate DMs
Real Support Channels
| Platform | Real Support |
|---|---|
| Coinbase | @CoinbaseSupport (verified) |
| Kraken | @krakensupport (verified) |
| Binance | @BinanceHelpDesk (verified) |
| Gemini | @GeminiSupport (verified) |
| MetaMask | @MetaMaskSupport (verified) |
All real support accounts have verified blue checkmarks. No exception.
The “Reddit Recovery” Variant
On Reddit, scammers browse crypto subs looking for “I got scammed” posts. They comment: “DM me, I can help recover your funds.” This is a recovery scam — they ask for an upfront fee and disappear.
The Discord Server Takeover
Scammers send friend requests on Discord claiming to be server admins. They ask you to “verify your wallet” by entering your seed phrase on a fake website.
How to Get Legitimate Support
- Use the official support form on the company’s website
- Email the official support address from the company’s domain
- Call the phone number listed on the official website
- Submit a ticket through the company’s support portal
The Golden Rule
No legitimate support agent will ever:
- Ask for your password
- Ask for your 2FA code
- Ask for your seed phrase or private key
- Send you a login link
- DM you first asking for account access
Verdict
If someone contacts you offering support on social media, it’s a scam. Always initiate contact with support through the official channels on the company’s website. Never trust DMs.
Related: How to Recover a Hacked Account | Common Phishing Attacks | Pig Butchering Scams