Tangem Safety Guide

Many crypto users understand the importance of keeping their seed phrase secret. However, this awareness also creates opportunities for scammers to exploit users through other methods.

One common tactic is offering a large reward in exchange for a small action or commission. Scammers are persistent and will continuously attempt to trick users into revealing sensitive information, including their seed phrases.

How does a classic phishing scheme work?

To help you recognize phishing attempts, here is a typical scam broken down into five stages. Each stage represents a step in the attacker’s strategy.

Stage 1: Setup

At this stage, scammers prepare their phishing campaign. They create fake websites, domains, and email addresses that closely mimic legitimate ones. Their goal is to appear trustworthy and convincing.

Stage 2: Bait

Phishers use various means to bait potential victims. They often send deceptive emails, messages, or social media posts that appear legitimate. Common tactics include urgent messages, offers, or alerts, creating a sense of urgency or excitement to encourage immediate action from the prey. 

Example: An unsuspecting user receives a message from a fake crypto project or wallet team: "To celebrate our launch, we’re giving away $10,000 to users who register before the end of the week. Click the link to get started."

Stage 3: Information gathering

After clicking the link, the victim is redirected to a fake (phishing) website that looks like a legitimate one. There, users are prompted to enter sensitive information such as: login credentials, personal details, or seed phrases. 
Attackers use convincing forms or login pages to harvest this data. If you think you can spot a fake immediately, you might be disappointed: over the years, scammers have learned to create pretty convincing bogus websites.

Stage 4: Exploit

With the acquired information, attackers drain the victim's wallets, steal their identity, or further the phishing campaign by targeting the victim's contacts. The attack may happen immediately or gradually over time.

Stage 5: Exit

Finally, scammers attempt to cover their tracks. They may shut down fake websites, delete accounts, or reuse the same tactics in future attacks.

How are Tangem users often targeted?

Below are common phishing scenarios reported in crypto communities such as the Tangem Telegram chat and Discord server.

Fake Customer Support on Telegram

Ideally, our users would contact support directly via email or the official Tangem chatbot to fix a problem that cannot be solved by going to Tangem Help Center.

Unfortunately, many users often go straight to the Tangem Telegram chat or other open discussion spaces to voice their issues or recommendations without considering the dangers involved. Scammers monitor these chats and quickly reach out via direct messages, pretending to be Tangem support representatives.

They typically:

• offer help
• send a phishing link
• redirect users to a fake website

These fake websites often resemble the official Tangem site, but with key differences—for example, replacing the Get Tangem button with Connect Wallet.

Users using Tangem as a seedless wallet might be immune to this type of phishing attack, but users with seed phrases are especially vulnerable to this type of attack.

Important:

• Tangem representatives or support team members will never contact you first via DM
• Always contact support directly instead of leaving a public message or comment
• Never follow suspicious links or connect your wallet to unknown platforms

Fake Discord Tech Support

Scammers also operate in Discord communities. A typical scenario:

A new user asks a question in the chat. A scammer responds with something like: "Hello, if you want to open a tech support claim, please fill it out here #techsupport." 
 

However, the provided link leads to a fake Discord channel, not the official Tangem server. From there, scammers may:

• create a fake "support ticket"
• ask for sensitive information
• attempt to gain access to the wallet

Important: 

• Tangem will never ask you to join another server
• Support requests can only be created via official Tangem channels
• Report suspicious users immediately