Orca Crypto
Tokens Book a session
Menu
Start Here
Start from zeroBuy your first cryptoHow to buy cryptoCoinbaseCoinbase AdvancedBinance.USUpholdApps we useCoinbase WalletJupiterBrave BrowserTradingViewWalletsWallets by chainHot vs cold walletsMetaMaskPhantomLedgerSlushWallet pickerBook a one to one session
Learn
Open the learning pathChoose your levelFind your levelBeginnerIntermediateAdvancedExpertTest your knowledgePopular guidesWhat is cryptoWhat is blockchainWallets explainedSeed phrasesGas feesYour first swapReading what you signCrypto taxesCompareAll comparisonsCoinbase vs Binance.USMetaMask vs PhantomLedger vs TrezorEthereum vs SolanaUniswap vs PancakeSwapCompare any twoEvery question we answer
Chains
Compare all networksBy layerLayer 1 networksLayer 2 networksLayer 3 networksBridges explainedName servicesBlock explorersPopular chainsBitcoinEthereumSolanaBaseSuiRobinhood ChainMining and stakingMining and staking explainedStakingMiningLiquid staking and restakingValidators and nodesProof of work vs proof of stake
Exchanges
Exchanges explainedDEX vs CEXDEX vs CEXCentralized exchangesDecentralized exchangesTop ten DEXsDEX viewersSwap guides by chainPopular DEXsUniswapJupiterPancakeSwapAerodromeSushiSwapKyberSwapLaunchpadsAll launchpadspump.funLetsBonk.funZoraMoonshotFOMOLaunchpads on Robinhood Chain
Markets
What moves the marketLive dataMarket meters, liveTop 1000 by market capFear and greedBitcoin dominanceAlt season indexUSDT dominanceGas trackerPrice driversFOMC and interest ratesInflation and CPIETF flowsBitcoin halvingLiquidity cyclesStablecoin supplyElections and policyWar and geopoliticsCharts and tradingCharts 101CandlesticksChart patternsIndicatorsRisk managementTrading simulator
Tools
All eighteen toolsWork out a numberPosition sizeProfit and lossLiquidation priceImpermanent lossSwap fee comparisonMarket capUnlock and dilutionCost basisCheck something liveToken safety checkerScam message checkerTransfer costGas trackerFear and greed indexExplorer routerPractice and referenceAll simulatorsTrading simulatorPhishing simulatorChart pattern trainerSlang decoderWallet pickerSeed backup sheet
Safety
Open the safety hubKnow the attacksAttacks and scamsCommon scamsPhishing and drainersSpotting a rug pullToken approvalsPig butcheringSIM swap attacksProtect yourselfSecurity checklistSelf custodySeed phrase securityHardware walletsMultisig explainedRecovery planningIf it goes wrongWallet drained? Start hereSent to the wrong addressWhat went wrong, every caseFTXTerra and LunaMt. GoxThe Bybit hackTry the phishing simulator
Glossary
Open the glossaryFoundationsBlockchainWalletSeed phrasePrivate keyAddressGasTransactionTrading and DeFiDeFiMarket capSlippageLiquidity poolStablecoinImpermanent lossLiquidationSlang, decodedSlang decoderHODLFUDWAGMIDegenRektDiamond hands
More
Book a sessionEvery question answeredContactFollow on XJoin on Telegram
Our tokens Book a session
Impersonation

Fake support and impersonation

Somebody posing as help, reaching you first, after you asked a question in public.

Loading live prices
Attacks
All attacksPhishing emails and messagesSextortion phishingRansomwareWallet dustingPig butchering and romance scamsFake support and impersonationGiveaway and doubling scamsSIM swap attacksMalicious airdrops and claim sitesClipboard hijackingCounterfeit wallets and extensionsPhysical safety and operational securityDeepfakes and AI impersonationSafety hubSecurity checklistSelf custodySeed phrase securityHardware walletsToken approvalsRecovery planning
By the Orca Crypto teamUpdated 2026-09-01How we check this5 min read
The short answer

Somebody posing as help, reaching you first, after you asked a question in public. You post a problem in a Discord, a Telegram group or a reply on X. Within minutes somebody helpful appears in your direct messages. They have the right display name, the right avatar and a support ticket link. Real support almost never contacts you first, and real support never needs your seed phrase or a screen share.

What it is

You post a problem in a Discord, a Telegram group or a reply on X. Within minutes somebody helpful appears in your direct messages. They have the right display name, the right avatar and a support ticket link. Real support almost never contacts you first, and real support never needs your seed phrase or a screen share.

How it plays out

  1. You ask for help in public

    Bots watch for keywords like "stuck", "failed transaction", "cannot withdraw".

  2. Help arrives privately

    Fast, friendly, and with a name and picture copied from a real team member or moderator.

  3. You are moved to a ticket or a form

    Which asks you to connect a wallet, import a seed phrase to "validate", or install remote access software.

  4. Or they offer to walk you through it

    On a screen share, so they can watch you type.

What gives it away

  • Anyone who contacts you first about your funds.
  • A request to validate, sync, restore or migrate a wallet.
  • Any request for a seed phrase, a private key, or a screen share.
  • A support link that is not on the project’s own domain.
  • Direct messages in a server where staff have said they never message first.

How to not be caught by it

  • Turn off direct messages from server members in Discord and Telegram.
  • Only use support routes you navigated to yourself from the official site.
  • Never share a screen while a wallet is open.
  • Assume the first person to help you privately is the attacker, and verify in the public channel.
The hard part is not technical
None of these require technical skill to avoid. They require doing the boring check at the exact moment you feel most rushed, which is the whole difficulty.

If it already happened

  • Disconnect any remote access session immediately and shut the machine down if unsure.
  • If you entered a seed phrase anywhere, move funds now from a clean device. That phrase is burned.
  • Revoke approvals for any wallet you connected.
  • Report the account in the server it came from so the moderators can ban it.
Recovery scams
Anybody who contacts you offering to recover lost crypto for a fee is running the second scam on the same victim. There is no recovery service that can reverse a blockchain transaction, because nobody can. Report it through official channels and ignore everyone else.

Where to go next

All attacksThe full list, side by side.Security checklistDo the fixes in order.Self custodyHolding your own keys properly.

Check your setup before you need to

An hour on a screen share, going through your wallets, your approvals, your backups and your recovery plan. You click everything and we never ask for keys.

Book a sessionSee all attacks

Common questions

Why did support message me first?
Real support does not. Anyone who reaches out to you after you post a question in public is an attacker watching that channel. This is close to a universal rule and it catches a lot of people on their worst day.
They want to screen share to help. Is that safe?
No. A screen share shows them everything, including a recovery phrase you might display while following their instructions. No legitimate support process needs to watch your screen or see your phrase.
Share this page

Was this page useful?