KeyStone
Get in touch
EN ES
← All articles

Scams · Validators

The «seed validator»: the website that empties you in 3 seconds

There is no technical reason to type a recovery phrase into a web page. None. Every site that asks for it, with any excuse and any appearance, is stealing — and the theft is automatic: there is nobody reading it on the other end.

October 3, 2026 · 4-minute read

How the theft works

The moment you type the phrase and press the button, a program receives it and instantly generates all your possible accounts. It checks which hold funds and empties them, all of them, in the same second. There is no person weighing whether it is worth it: it is a machine, and that is why it is so fast.

Some don’t even wait for the button: they take what you type as you type it. That is why «typing it and then deleting it without submitting» doesn’t help.

The disguises they use

  • Seed validator or checker. «Check whether your seed is valid.»
  • Wallet synchroniser. «Your wallet needs to sync to show your balance.»
  • Word recovery tool. «Enter the 11 words you have and we’ll compute the missing one.»
  • Migration. «Your old wallet is no longer supported, migrate here.»
  • Official support. An exact copy of a known brand’s site, with one letter changed in the address.
  • Balance checker. «See how much you have without installing anything.»
The third disguise is the cruellest, because it is exactly what someone with a missing word would search for. And it is technically plausible: recovering a missing word genuinely is possible. What isn’t possible is doing it by handing your phrase to a stranger’s website.

How they end up in front of you

  1. Search adverts. They appear above the official result, with the same name and a near-identical domain.
  2. Links in forum replies, often from recently created accounts.
  3. Private messages, after you post your problem.
  4. Videos with links in the description, frequently with fake comments confirming it works.
  5. Fake apps in the stores, using a known wallet’s name.
The first is the most dangerous because it doesn’t look like a trap: you searched for it, you clicked the top result, and the site is identical to the official one. Always type the address by hand, and if you don’t know it, reach the official site from the app you already have installed.

The rule that covers everything

Your phrase gets typed in exactly one place: the wallet app you installed yourself from the official site. Nowhere else. Not a website, not a chat, not a search box, not a translator, not a document. Keep that rule and these scams cannot touch you.

And if you have already typed it somewhere, act now: I entered my phrase on a website: what to do RIGHT NOW.

Keep reading