The non-negotiables
- Never type, photograph, or share a recovery phrase - no legitimate party ever needs it
- Generate keys on a device you control, ideally a hardware wallet
- Keep a separate wallet for interacting with unfamiliar applications
- Verify contract addresses from more than one independent source
Ongoing maintenance
- Review and revoke token approvals periodically
- Keep wallet firmware and applications updated from official sources only
- Enable withdrawal address allow-lists on exchanges
- Store the recovery phrase offline, in a location only you can reach
If you suspect compromise
Assume every key derived from the exposed phrase is lost. Create a new wallet with a new phrase on a clean device, move remaining assets, and record every transaction hash for your report.
Independent service. FraudGuard Recovery & Cyber Safety is an independent private service. We are not a law enforcement agency, government body, bank, regulator or law firm, and we have no government affiliation. We do not guarantee the recovery of lost funds. Outcomes depend on the circumstances of each case and on the institutions involved.