Wallet scam email

[DYING_S0UL]

You guys are checking emails? Lol, I barely check mine. In fact, gmail is the most rarely used app on my device.

I guess you are one of the lucky ones who can go about your day without checking your email every once in a while. 

Having said that, I don't mix the email address I use for crypto related stuff with anything else (as I see that OP used same email for exchanges and banking, which is not good practice imho).

I have already learned my lesson once. From then on, I swore no more. One of my email was leaked through such data breach, and every now, and then I would get spam messages like OP. Later, after creating dedicated mails for each of the category, the spam stopped coming. Currently, I use the email, only when I need the 2Fa codes or when I need code for the CEX, and another one is filled with notifications from BTT. I'm still using the leaked mail, but I don't interact with any of the content i receive there.

[Rikafip]

I have already learned my lesson once. From then on, I swore no more. One of my email was leaked through such data breach, and every now, and then I would get spam messages like OP.

My email address was also leaked due to the infamous Ledger leak. For the first year or two, I kept receiving spam and various scam attempts, but for whatever reason they eventually stopped. I stopped using that email address immediately after the leak, but I still check it from time to time (mostly out of curiosity).

Currently, I use the email, only when I need the 2Fa codes or when I need code for the CEX, and another one is filled with notifications from BTT.

Some of us don't have that luxury of rarely using email. For example, a few weeks ago I received an email saying that my flight would be delayed by a few hours. If I hadn't checked it in time, I would have been screwed because I had a connecting flight that I would have missed. Luckily, I saw the email in time and managed to rebook the connecting flight for a few hours later.

[salad daging]

Try checking your email here, how big the leak is, maybe this site helps a little to know.
https://haveibeenpwned.com/
This scam is a classic, it's just that scammers still continue to commit crimes by sending random spam emails as if they were from the official party.
I also often receive fraudulent emails like this from Trezor, because the data has been leaked too often.

[CryptSafe]

I stopped using Coinomi few years ago and moves to other wallets. Yes, the scammers tried to contact you and tricked you but you aware of them. But they do not stops and search for other targets that will be easily to scam.

Maybe you are just a random target which receiving their email because they can do that and see the result. Scammers will trying so many ways to trick their target and if we are not careful, we might be the next target.

I also stopped using Coinomi years ago after I began noticing some minor errors and bugs, which they had refused to attend to. Since to adopted the closed source wallet I knew there is something fishy about the sudden change in their activities so I quickly transferred all my assets out of the wallet to another wallet and marked the end using coinomi wallet.

Scammers never giveup any tactics they have at hand be it old or new. They just keep trying to see if they could catch a fish in their net everyday but the truth is that there are still those who are newbie that would fall for this trap as they have no idea about this scheme.

[Amphenomenon]

No kne should consider scammers as individuals lacking creativity, the don't lack and they are often good with innovative skills.

I assume you're responding to the quoted post in my post instead of my reply. I'm not sure if I'll call scammers creative or not creative, since they're not a singular entity and some groups behave differently to begin with.

This was more to the other guy, I was emphasising on what you were saying also.

I more or less agree with the point that if their current trick work it's unlikely they'll change it significantly. Another point is I believe most of them know 90% of recipients won't get tricked, so there's no need to spend a money to make every single email personalized.

The thing is if they find out that this is still no longer working, that's they are not making much profits as they ought then, they will be creative and innovative in order to get much.

Also, creativity varies with scammers.

[Conqueror777]

When I saw this email just some minutes ago, I know it was a scam because I do not expect any team from a noncustodial wallet to send me any email, but scammers did it.

When I noticed the difference between open source wallets and close source wallets few years ago, I stopped using Coinomi as they moved from open source to close source and this has been more than 4 years ago that I have not been using the wallet, but I saw scammers sent me an email today about the wallet.

This is the email:

https://talkimg.com/images/2026/06/26/U1xRu9.jpg   https://talkimg.com/images/2026/06/26/U1xt4a.jpg


If you click on the link on the email, it will take you to your browser to update your seed phrase
https://talkimg.com/images/2026/06/26/U1xTNN.jpg   https://talkimg.com/images/2026/06/26/U1xzxo.jpg


I stopped because I know if I put my seed phrase there, the scammers will see it and they will steal all my coins.

This scam is very old already, I do not think people should not know about it by now, but for the sake of our new members, I post this so that they can learn and know about this scam.

Yeah it's totally a scam, scammers are getting inventive by the minute!

[Comeacross]

The most funny thing I saw today is updating recovery phrase. It's like scammer pretending like bank officer call customer to get their card details. The most important thing in a wallet is recovery phrase which can never be updated.

The scammer is probably a third class graduate and the victim must be a drop out student because I still can't figure how dumb someone would be to fall that cheap scam.

Is seed phrase a software that needs to be updated regularly? How does the update looks like assuming it happens? The seed phrase would change into a different seeds?

I can't make any sense out of it and anyone falling for this should totally stay away from crypto because they obviously have no business here.

[Rikafip]

Try checking your email here, how big the leak is, maybe this site helps a little to know.
https://haveibeenpwned.com/

The thing that I always wondered when someone mentions this website is, what if those behind it are actually using it as a sort of honeypot, and then selling the data, or using it themselves. 

I do know that they claim that they don't store any info, but there's no way of knowing that for sure.

[SilverCryptoBullet]

Try checking your email here, how big the leak is, maybe this site helps a little to know.
https://haveibeenpwned.com/

The thing that I always wondered when someone mentions this website is, what if those behind it are actually using it as a sort of honeypot, and then selling the data, or using it themselves. 

I do know that they claim that they don't store any info, but there's no way of knowing that for sure.

I agree that for privacy, it's always not safe to enter our email address and check on any website. I agree with your concern about that too but honestly I feel if only with an address data, what will they do with our email addresses?

I of course know that after entering an email address on that website, they will give some information that I don't know how they get such information from, and how they can know that an email address has been pwned or not. I am truly confusing with that but if there is doubt about an email is no longer safe to use, let's change its password to a very strong one, set up a 2FA and abandon it or never use it for important things. It's safer than checking with that website.

[ImGenius]

Try checking your email here, how big the leak is, maybe this site helps a little to know.
https://haveibeenpwned.com/
This scam is a classic, it's just that scammers still continue to commit crimes by sending random spam emails as if they were from the official party.
I also often receive fraudulent emails like this from Trezor, because the data has been leaked too often.

Thankfully my emails data isn't breached. Sometimes we become the product of information seller although i don't care if some of my external emails got exposed to dark web actually I don't use my personal email anywhere. If i remember correctly few years ego I received a scamming massage in my email but I didn't click it out of fear. It was a email to claim token which i necer actually joined. Still i checked the official website which they impersonate but I didn't win there anything thats how i come to conclusions it was a scammer massage.

[Itz-prisigold]

Thankfully my emails data isn't breached. Sometimes we become the product of information seller although i don't care if some of my external emails got exposed to dark web actually I don't use my personal email anywhere. If i remember correctly few years ego I received a scamming massage in my email but I didn't click it out of fear. It was a email to claim token which i necer actually joined. Still i checked the official website which they impersonate but I didn't win there anything thats how i come to conclusions it was a scammer massage.

This is a good practice. Instead of someone just blindly trusting emails it's better to checked the information on the project's official website, rather than taking the word for it from an email, which is what more people should do.  A lot of phishing emails are based on the assumption that people will respond very fast without verifying the sender.

The other thing I have noticed is that scammers usually send out these fake reward/airdrop emails to thousands of people at a time. They do not know if you have ever participated on the project or not, they assume that a tiny fraction of recipients will click the link out of curiosity. This is why even if you are sent an email notification about something you've never signed up for should raise suspicion.

[Hazink]

Yeah it's totally a scam, scammers are getting inventive by the minute!

That's not a new invention. It's an old scam pattern and only someone who doesn't know what a non-customized wallet means will easily fall for such a scam. You don't use mail to generate a wallet, and even if there is any upgrade, you can't be required to write your secrete phrase that you were warned at the time of creation never to share in some strange website which could easily be identified to be cloned.

[uchegod-21]

This scam is too old for anyone to fall victim to it. I don't know the word that can best describe someone who would fall victim to a scam like this. The major red flag here is the "seed phrase upgrade." After your seed phrase has been generated, there is no tampering with it and no updating it. The scam was so obvious that even if you believed they were genuine at the beginning, their request for a seed phrase upgrade gave them away.

Newbies should take note once again that they must never enter their seed phrase anywhere, for any reason, no matter how convincing the person on the other side may sound.

[Hamza2424]

Good catch bro. You did great by sharing it here. These phishing attempts are old but they still work. If you would still be using it and were not this active, then you would probably have given them the seed phrase.

Because when they email you with such intensive words, they make you think a time bomb is ticking and now you have to defuse it by giving them the seed phrase haha.

The quality of email spoofing is actually getting better too. I mean the email looks completely genuine, no broken formatting, and a completely professional way to greet you even haha. They know this business well.

I never open any email I receive haha.

[Sandra_hakeem]

If you click on the link on the email, it will take you to your browser to update your seed phrase

I stopped because I know if I put my seed phrase there, the scammers will see it and they will steal all my coins.

This scam is very old already, I do not think people should not know about it by now, but for the sake of our new members, I post this so that they can learn and know about this scam.

To be honest, I even won't bother to click on such links. Once I receive any emails from a non-custodial wallet, I just delete them and mark them as spam as well sometimes. Also, if there is an option for unsubscribing, then I do unsubscribe as well. Because I think it's even risky to click on an unknown link, and it would download malware as well on my device.

This is the part that scares me the most, the malware. I would say nobody is that dumb to upload their seed phrase on a link from an unknown source, but I have seen worse--- someone complaining of not being able to place a withdrawal, but then screenshots their wallet details and post them online to whomever is willing to help, and the wallet seemed to be loaded! Most people really have the survival instinct of a sloth.

I do know that they claim that they don't store any info, but there's no way of knowing that for sure.

Meta says something even more reassuring--- that messages are encrypted end-to-end, even they themselves can't view them, but that's entirely not true.

[PostQuantumBTC]

This scam is too old for anyone to fall victim to it. I don't know the word that can best describe someone who would fall victim to a scam like this. The major red flag here is the "seed phrase upgrade." After your seed phrase has been generated, there is no tampering with it and no updating it. The scam was so obvious that even if you believed they were genuine at the beginning, their request for a seed phrase upgrade gave them away.

Yes, it is a very old scam, but newbies can still fall for it, although I am not expecting newbies that know what seed phrase is to fall for it at all because seed phrase should not be entered on a website. Only place seed phrase should be enter is when you are backing it up and no other places. Some old scam will be repeated by scammers just to look for newbies to scam..

[uchegod-21]

This scam is too old for anyone to fall victim to it. I don't know the word that can best describe someone who would fall victim to a scam like this. The major red flag here is the "seed phrase upgrade." After your seed phrase has been generated, there is no tampering with it and no updating it. The scam was so obvious that even if you believed they were genuine at the beginning, their request for a seed phrase upgrade gave them away.

Yes, it is a very old scam, but newbies can still fall for it, although I am not expecting newbies that know what seed phrase is to fall for it at all because seed phrase should not be entered on a website. Only place seed phrase should be enter is when you are backing it up and no other places. Some old scam will be repeated by scammers just to look for newbies to scam..

Being a newbie does not mean you must be a fool to prove it. Apart from being new to Bitcoin, it is general security knowledge that you do not give out your passwords or other private details to strangers or people pretending to be from the original source. In fiat banks, people are often warned not to share their Personal Identification Numbers or other sensitive details with strangers. All matters should be resolved directly at the bank. But when the same people who have been very careful with their bank information switch to Bitcoin, they seem to forget or ignore all forms of security consciousness.

Every newbie must, as a matter of importance, enquire about the first things they must do to protect their Bitcoin and the things they must not do to avoid losing it. If they actually care to know these things, they would know that there is no such thing as a seed upgrade. Unfortunately, most newbies only care first about how to invest in bitcoin.

[salad daging]

Try checking your email here, how big the leak is, maybe this site helps a little to know.
https://haveibeenpwned.com/

The thing that I always wondered when someone mentions this website is, what if those behind it are actually using it as a sort of honeypot, and then selling the data, or using it themselves. 

I do know that they claim that they don't store any info, but there's no way of knowing that for sure.

We never know what's behind it all, we always believe in this site because it's recommended by others, nothing more than that, according to Trustpilot reviews there are those who say after using this site suddenly their email is attacked by scammers who keep sending emails and they have a reputation of 3.4 so really don't trust too much.

Thankfully my emails data isn't breached.

To stay careful not to use this site too often, read here the review. https://www.trustpilot.com/review/haveibeenpwned.com

[AVE5]

The most funny thing I saw today is updating recovery phrase. It's like scammer pretending like bank officer call customer to get their card details. The most important thing in a wallet is recovery phrase which can never be updated.

Very stupid thought of that scammer, I don't even understand how someone is going to update a recovery when wallet addresses is being generated together with its unique recovery phrase.
So does it mean recovery phrases are outdated that requires the need for the upgrade? It's obvious that the scammers wasn't thoughtful because a learned user should know that recovery phrases can only be one and should be managed privately as no officials or site is expected to send email of updating your seed phrases.

[gordonics.com]

Sure, stupid. This is the classic phishing pattern: a real wallet team should never ask you to enter a seed phrase through a mail link.
But not everyone have the safest habit to ignore the email and verify any update only from a bookmark or the vendor’s official site.