Official Wallsec emails only ever come from an @wallsec.co.uk address.

Scam types · 5 min read

Fake exchange email or call: what to do if you responded

Impersonation messages claim there is a problem with your account and ask you to move funds to a 'safe wallet', confirm a code or install an app. Genuine providers do not ask you to move funds to protect them.

Written and reviewed by the Wallsec investigations team · Last updated

If you clicked or shared details

  • Log in only through the official app or typed web address and change your password.
  • Reset two-step verification and review connected devices and API keys.
  • Contact the real provider through its official support page.

If funds were moved

  • Save the transaction hash, the destination address and the message you received, with dates.
  • Report to the provider, your bank if applicable, and Action Fraud.
  • Funds sent on the public record can be followed to identify where they went.

If you are looking at your own case rather than reading generally, our cryptocurrency investigation service explains how a case is scoped and worked, the asset tracing hub covers the network-specific work, and our overview of cryptocurrency scam recovery in the UK sets out what is realistic. Asset pages: USDT tracing, Bitcoin tracing and Ethereum tracing. You can also contact the investigations team directly.

Common questions

The caller knew my name and balance. Does that mean it was real?
No. Personal details are often taken from data leaks. Hang up and contact the provider yourself.
This guide is general information, not legal or financial advice. We provide investigation, reporting and support with practical next steps; no outcome is guaranteed.

Have a case you want reviewed?

We scope at intake and tell you honestly whether the onchain data supports a traceable case.

Request a case review

Related guides