Crypto wallet recovery scam lures users with fake seed‑phrase tool

A new malware‑laden scam is circulating that pretends to recover forgotten 24‑word seed phrases, harvesting passwords, documents and photos from users who download the fake “Lost crypto wallets finder” tool [1].

How the scam works

Scammers set up counterfeit websites that promise a free “cryptocurrency recovery” program for users who have lost their seed phrase. When a victim downloads the tool, it silently installs malware that collects a wide range of personal data—including browser passwords, documents and photos—and compresses it into a zip file that is sent to the attackers [1]. The site hosting the software has already been taken down, but researchers warn that near‑identical copies can appear quickly [4].

Who identified the threat

Alex Holland of the HP Security Lab uncovered the scheme and explained that the fraud exploits the desperation of users who cannot access their wallets. He said a typical victim will search for “free cryptocurrency recovery tool,” encounter the fake offering, and unwittingly hand over their data [1][3]. The lab’s analysis confirms the malware’s capability to harvest credentials that could be used for future fraud.

Scope and warning signs

Although the exact number of victims is not disclosed, the scam’s design—targeting the panic of potentially losing thousands of dollars—makes it lucrative for cybercriminals. Security experts advise users to avoid downloading any recovery software from unverified sources, to check reviews of legitimate services, and to remove any installed malware with reputable security tools, resetting passwords thereafter [1][4].

What to watch

• Emergence of new domains offering “crypto recovery” tools, especially those mimicking the “Lost crypto wallets finder” name.
• Reports of increased credential theft linked to crypto‑related malware in the coming weeks.
• Official advisories from security firms or regulators about similar scams targeting wallet access recovery.

The scheme highlights a growing trend: fraudsters are shifting from attacking blockchain encryption to exploiting human psychology, turning users’ panic over lost seed phrases into a data‑theft opportunity. As long as the promise of a free recovery tool exists, the threat is likely to persist.