What to do if you gave a scammer your seed phrase
Maybe a fake support agent talked you through it. Maybe a site told you to “validate” your wallet and you pasted the twelve words in. However it happened, a scammer now holds your seed phrase, and that is a different animal from a stolen password. Let’s work it in order, calmly, because a few of these steps still matter and some of them are time-sensitive.
Move whatever is left, before anything else
If there is still crypto in that wallet, treat the clock as already running. A seed phrase gives whoever holds it total control, so the wallet is no longer yours to defend. Set up a brand-new wallet on a device you trust — ideally one that never touched the scam — and move any remaining funds there. Don’t reuse the old phrase anywhere. If you have a hardware wallet, generate a fresh set of words on it rather than restoring the compromised ones.
Why there is no password to change
A seed phrase isn’t a login. It is the master key to the wallet itself — the thing that regenerates every address and private key inside it. There is no reset button, no support line that can revoke it, no way to lock the wallet while keeping the same phrase. That is hard to hear, and it is exactly what the scammer is betting you don’t know. The only real fix is to abandon the exposed wallet and start clean.
What the scammer can reach, and what stays out of reach
They can drain any asset sitting in that wallet, and many of them automate it, so the transfer can fire within minutes of the words landing. What they cannot touch is anything that never lived in that wallet. Your exchange account sits behind its own login and 2FA. Your bank is separate. Other wallets with different phrases are untouched. Secure those next — change exchange passwords, reset two-factor, and check that no one quietly added a new withdrawal address while you weren’t looking.
Can the stolen crypto be traced? Honestly.
Yes — and this is where a clear head earns its keep, as long as you keep tracing and recovery separate in your mind. Every move out of your wallet is written to the blockchain, so an investigator can follow the funds across addresses and often to the exchange where the thief tries to cash out. What that produces is a documented record of where the money went, which is the thing a police report, an exchange fraud team, or a civil claim can act on. What it doesn’t do is reverse the transaction or force the coins back — crypto has no undo, most individual victims never see a refund, and the wallet-drainer crews behind these thefts are often automated and overseas, well past the reach of an arrest. Reporting fast still matters: funds that land at a compliant exchange can sometimes be flagged before they scatter through mixers. Anyone who answers this question with a guarantee, or a percentage-of-recovery fee, is lying to you.
The next hour, step by step
Write everything down while it is fresh: the wallet address, the transaction hashes, the site or person that asked for your phrase, any usernames or links. File at IC3.gov and report to the FTC at ReportFraud.ftc.gov. If a known exchange received the funds, contact its support and hand over the transaction details. Then brace for the follow-up: within a few days, “recovery experts” tend to surface in your DMs promising to claw it all back for a fee. That promise is the second scam — real tracing is never sold as a guaranteed refund paid upfront.
Where to put your energy
If the loss is large enough that you want a documented trail for a civil case or an insurance question, our Investigation Help page covers the smaller-case work we sometimes take on. For five- and six-figure losses that need to hold up in court, we route to Rexxfield for court-grade fund tracing. Either way, nobody legitimate will ask you to pay in crypto to unlock your own money.
You trusted the wrong person for a moment. Scammers engineer that moment for a living, so it isn’t a verdict on you. Move quickly, keep a record of everything, and let the chain do the part it is good at.
— Lisa, GCCI