KeyStone
Get in touch
EN ES
← All articles

Scams · Fake support

Fake MetaMask and Ledger technical support on social media

There are programs watching social media and forums waiting for someone to write «I can’t get into my wallet». The reply arrives in minutes, sometimes seconds, and looks like official help. It never is.

September 29, 2026 · 4-minute read

How it works

Scammers run automated keyword alerts. When you post your problem, a program detects you and replies or DMs you with a prepared script. The account has the company logo, a name close to the official one and sometimes even a purchased verification badge.

From there the script is always the same: they take you to a separate chat, give you genuine assistance for a while to build trust, and at some point a form appears, a «validation» site, or a direct request for your phrase.

How to spot it in ten seconds

  • They messaged you first. Real support at any company in this sector does not DM you.
  • The channel is a chat. Real support lives on the company’s official website, not in groups or direct messages.
  • They ask for your phrase, at any point and with any excuse.
  • They send you a link to a support or validation site.
  • There is urgency. «You have to do it now or you’ll lose the funds».
  • They ask you to install something so they can «see your screen».
The last point is especially dangerous. If you share your screen and at some point open your wallet, your phrase or keys can be recorded. Never share your screen with someone who contacted you privately, and certainly never while opening a wallet.

Why big brands are the most impersonated

Because they have millions of users and because their real support is limited. People look for help on social media precisely because they can’t find it at the company, and that is where the scammers wait. With Ledger there were also customer data leaks years ago, so many users receive personalised emails and messages using their real name.

A message knowing your name, your address or which device you bought proves nothing. That data has been circulating for years. The only way to verify who you are talking to is in how to verify who you are talking to.

What to do instead

  1. Type the official website address by hand in your browser. Never search for it: the top results can be fake adverts.
  2. Use the support channel on that site and only that one.
  3. If you post your problem on a forum, state that you don’t accept DMs and reply only in public.
  4. Ignore and report any private message, however well written.

Keep reading