Somewhere on YouTube, Reddit, or a random Telegram group, someone posts a twelve or twenty four word recovery phrase along with a screenshot showing a wallet holding a few hundred dollars of USDT or ETH. The message reads like an accident: "forgot to delete this before uploading, please ignore" or "my old wallet, does anyone know how to recover funds from here." It looks like someone else's carelessness handed you free money. It did not. It is a trap, and understanding exactly how it works is the best protection against it.
How the trap plays out
The steps are almost always the same.
- You find a recovery phrase posted somewhere public, often attached to a claim that it holds real funds.
- You import that phrase into a wallet app to check, and sure enough, the wallet shows a balance. Usually it is a stablecoin like USDT, occasionally paired with a tiny amount of ETH or another network's gas token.
- You try to move the funds out to your own wallet, and the transaction fails or gets stuck. Your wallet tells you that you need a small amount of the network's native gas token to cover the fee, and the wallet holding the funds does not have enough.
- You send a bit of ETH, BNB, or TRX from your own funds into that wallet to cover the gas, planning to immediately transfer the balance out.
- The moment that gas arrives, it disappears. The balance you were trying to claim disappears with it, or was never really movable to begin with. You are left with nothing, and you are out whatever you sent in.
The part that makes people fall for this is step three. It genuinely looks like a small, solvable inconvenience, not a warning sign. That framing is the entire trick.
Why it works: the wallet was never really open to you
Several mechanisms make this possible, and none of them require hacking your device.
Some of these wallets are multisignature wallets, where more than one private key or approval is required to move funds out. The recovery phrase you were given only supplies one of those keys. It looks like access, but it is not full access. Scammers configure these ahead of time, knowing that a curious person will send gas hoping to unlock a transfer they can never actually complete.
Others use a much simpler setup: a script watching that address around the clock. The instant any token lands there, whether it is the balance you were chasing or the gas you just sent to free it, the script sweeps it out in the same block or the next one. There is no delay for you to exploit, because the sweep is automated and the scammer's software is faster than any manual transaction you can send.
A related version skips the "leaked" story entirely and offers a seed phrase generator tool instead, often promoted as a free utility for creating a new wallet. Some of these tools quietly return the same small set of seed phrases to many different users, or generate phrases from a weak, predictable process instead of true randomness. Any wallet built from one of these phrases is already known to whoever built the tool, and any funds sent to it can be swept immediately. Genuine wallet generation, the kind used by Simple Base Swap and other reputable wallets, happens entirely on your own device using your device's secure randomness, never from a website that hands you a finished phrase.
The core lesson: a seed phrase you did not generate is not yours
This scam only works because it exploits a basic misunderstanding of what self custody actually means. A recovery phrase is not a password to a shared account that whoever finds it can compete for. It is the literal cryptographic key to a wallet. If a phrase is sitting in a public comment section, it is not a stroke of luck. Somebody who controls that phrase, or the tooling behind it, already has full access, and they built the situation specifically to make you fund your own loss.
The safe rule is simple and has no exceptions worth making: never import a recovery phrase you did not personally generate, and never send funds into a wallet to "unlock" or "activate" a balance that is not moving on its own. If a transfer needs gas you have to add before it works, that requirement is not a coincidence, it is the mechanism.
What is actually safe here
Importing a phrase you found, purely to look at it in a read only or watch only way without sending anything into that address, will not cost you money by itself. The danger starts the moment you send any asset, including gas, into that wallet. If you are ever tempted to test one of these out of curiosity, treat the wallet as radioactive: look, do not touch, and never fund it, not even with a few cents.
Recognizing this pattern matters more than memorizing any single version of it, because the specific bait changes constantly. New chains, new tokens, and new stories get plugged into the same structure. The constant is always the same: a balance that looks reachable, and a small payment from you that supposedly unlocks it. If you keep that structure in mind, the trap becomes easy to spot no matter what wrapping it comes in.
This is general information, not financial or investment advice.
Sources: Crypto scam: seed phrases shared publicly, Kaspersky official blog, Avoid the 12-Word Seed Phrase Generator with Balance Scam, Bitget Wallet, New Crypto Wallet Scam Targets YouTube Comments, Cryptonews