Fake Customer Service and Technical Support: How Scammers Impersonate Official Staff

Fake support agents create urgent problems such as an "account breach," "risk-control freeze," or "wallet malfunction," then ask for verification codes, remote access, or a transfer. A genuine verification process should always be initiated independently by the user through an official channel.

How Do Scammers Make Their Identity Look Legitimate?

They may use official logos, employee names, ticket numbers, and spoofed caller IDs. Some buy search ads so that a fake support number appears near the top of the results. Compromised verified social media accounts may also send "support" messages to followers.

Scammers may know your name, email address, or partial transaction details obtained from a data breach. Quoting real information only proves that the data has leaked; it does not prove that the caller represents the platform.

Which Requests Should Make You End the Conversation Immediately?

Stop communicating with anyone who asks for your password, a current 2FA code, seed phrase, private key, or remote-control access. Requests involving a "safe address," "wallet verification," "node synchronization," or an "upfront deposit before a refund" are also common transfer scams.

Legitimate support may ask you to submit identity documents or a transaction hash through your official account. It will not ask you to paste a seed phrase into a chat or transfer assets before your account can be protected.

How Can You Contact Official Support Safely?

Close the current chat or end the call. Open the support channel from a saved bookmark, the official app's help center, or the contact details in an official agreement. Do not use a phone number provided by the other party, and do not repeat the same search and click an advertisement.

After opening a ticket, confirm its number and replies inside your account. If you need to send a screenshot, first hide QR codes, keys, verification codes, full identity document numbers, and balances unrelated to the case.

What Should You Do If You Installed Remote-Control Software?

Disconnect from the internet immediately and stop using the device. From another trusted device, freeze your trading accounts, secure your email, and revoke active sessions. Then uninstall the remote-access tool, inspect startup items and browser extensions, and reinstall the operating system if the suspected compromise is severe.

If you opened a wallet or seed phrase while remote access was active, treat the keys as compromised rather than merely changing the app password. Preserve the software name, connection ID, chats, and transfer records, and report the incident to the platform and local law enforcement.

For more on malicious permissions, read Airdrop and Token Approval Scams. For a broader classification, see the Complete Guide to Cryptocurrency Scams.

Frequently Asked Questions

Can Support Staff Guide Me Through a Video Call?

A platform may offer an official video support service, but you must initiate and verify it from your account on the official website. An unsolicited video call offered through a direct message does not prove the caller's identity.

Is a Call Genuine If the Number Matches the Official Website?

Not necessarily. Caller ID can be spoofed. Hang up and call the number from the official website yourself, or submit a support ticket there.

Is It Normal for Support to Ask for a Transaction Hash?

A transaction hash is public information and may be needed to investigate a deposit or withdrawal. However, it should never be provided together with a password, verification code, or seed phrase.

Is Screen Sharing Safe If I Do Not Grant Control?

It is still risky. Your screen may reveal verification codes, QR codes, addresses, and balances, and scammers can verbally manipulate you into completing harmful actions yourself.