Fake customer support is one of the most common entry points for crypto theft. You post a complaint on Twitter, Reddit, or Discord, and within minutes a “support agent” replies offering help. The “agent” is a scammer who will take over your account.
How the Scam Works
- You have a problem — Exchange withdrawal is delayed, account is frozen, or you just have a question
- You post publicly — “Coinbase support is not responding. My withdrawal is stuck!”
- Scammer replies — Within minutes, @CoinbaseSupport_Help or @Coinbase_Care responds: “Our apologies for the trouble. DM us for help.”
- Phishing link — The scammer sends a link to a fake login page
- You enter your credentials — The scammer now has your exchange login
- Account drained — The scammer logs in, bypasses 2FA (or asks for your 2FA code “for verification”), and steals your funds
How to Spot Fake Support
- Handle is slightly wrong — Real support is verified (blue checkmark), fake support has a dot, underscore, or extra character
- Responses in seconds — Real support takes hours or days
- Asks for your password, 2FA code, or seed phrase — REAL SUPPORT NEVER ASKS FOR THESE
- Sends links to login pages — Real support will never send you a link to log in
- DMs you first — Real support will not initiate DMs
Real Support Channels
| Platform | Real Support |
|---|---|
| Coinbase | @CoinbaseSupport (verified) |
| Kraken | @krakensupport (verified) |
| Binance | @BinanceHelpDesk (verified) |
| Gemini | @GeminiSupport (verified) |
| MetaMask | @MetaMaskSupport (verified) |
All real support accounts have verified blue checkmarks. No exception.
The “Reddit Recovery” Variant
On Reddit, scammers browse crypto subs looking for “I got scammed” posts. They comment: “DM me, I can help recover your funds.” This is a recovery scam — they ask for an upfront fee and disappear.
The Discord Server Takeover
Scammers send friend requests on Discord claiming to be server admins. They ask you to “verify your wallet” by entering your seed phrase on a fake website.
How to Get Legitimate Support
- Use the official support form on the company’s website
- Email the official support address from the company’s domain
- Call the phone number listed on the official website
- Submit a ticket through the company’s support portal
The Golden Rule
No legitimate support agent will ever:
- Ask for your password
- Ask for your 2FA code
- Ask for your seed phrase or private key
- Send you a login link
- DM you first asking for account access
Verdict
If someone contacts you offering support on social media, it’s a scam. Always initiate contact with support through the official channels on the company’s website. Never trust DMs.
Related: How to Recover a Hacked Account | Common Phishing Attacks | Pig Butchering Scams
The Most Common Support-Scam Mistakes
Even cautious users slip up under stress, and scammers count on it. The most frequent error is replying to whoever responds fastest. A genuine support agent works a queue and may take hours, so when a stranger answers your public complaint within minutes, that instant response is itself a warning sign. Another common mistake is trusting a link the “agent” pastes into chat. Support never asks you to log in through a link they send — they direct you to the portal on their own domain. The most damaging habit is disclosing your seed phrase or 2FA code during a “verification” call, because no legitimate process ever requires those to confirm your identity. Many victims also confess that they did not double-check the handle, assuming a familiar logo guaranteed authenticity. Practising each of these habits in every support interaction — never clicking pasted links, never sharing secrets, always initiating contact from the official site — removes the openings a fake agent depends on.
Building a Safer Support Routine
The reliable way to avoid counterfeit support is to make the real channel your default before you ever need help. On any exchange you use, save the official support form, help-centre address, and verified social handle in advance, and test that you can reach them while you are calm rather than mid-crisis. When an issue arises, bypass search and messaging apps entirely: sign in to your account, find the “Help” or “Contact” section, and submit a ticket there. If you must use social media, only reply to accounts that carry a verified badge and mirror the exact handle you have already checked on the company’s site. Keep a note, updated every few months, of the phone number and support email shown in your account dashboard, since scammers rotate lookalike contacts that appear in search results. And in the moments that matter most — a frozen withdrawal, a lost device — remind yourself that no real support agent is ever in a hurry to collect your secret codes.