Library · Crypto, word by word · Scams and security
What can I do if my crypto wallet was hacked?
Move whatever is left to a new wallet with a new seed phrase, made on a device you trust, before doing anything else. Then cancel any token approvals the attacker may use, write down the transaction hashes and addresses, and report the theft.
What it means for you
Crypto payments typically cannot be reversed, so the aim is to stop further loss: a stolen seed phrase leaves the old wallet exposed for good. In the US, theft and fraud can be reported to the FBI's Internet Crime Complaint Center and to the FTC. Anyone who contacts you offering to recover the funds for a fee is very likely running a recovery scam.
How it works
How the attacker got in decides what is still at risk. A leaked seed phrase or private key gives full control of every account made from it, on every chain, so all of them need emptying to a fresh wallet. A malicious token approval or permit signature lets a contract keep pulling one token until the approval is revoked, even if the seed phrase was never exposed. A compromised computer or phone can leak the next wallet too, so make the new one on a clean device or a hardware wallet. The transaction hashes and receiving addresses are what an exchange or investigator can act on if the coins reach a business that freezes stolen funds.
Sources: FBI: Internet Crime Complaint Center (IC3), FTC: What to know about cryptocurrency and scams, ethereum.org: Security and scam prevention · checked 5 October 2026
Related words
Educational content, not financial advice. Written by hand and checked against the source named above. Something wrong? Tell us and we reply within two business days.