Wallet seed phrase theft in crypto gaming fake support scams
The most common point of failure in crypto gaming isn't a smart contract bug. It’s a DM from a stranger.
Scammers pose as support staff for Axie Infinity or Sky Mavis on Discord and Twitter. They send direct messages claiming a user’s transaction is stuck, or their wallet has a problem. The hook is often a specific error many players see: "transaction failed: out of gas." A real error, exploited as a fake entry point.
The scam proceeds in a predictable pattern. The fake supporter asks the user to visit a website to verify their wallet. That website looks like an official support portal. It requests one thing that no legitimate service ever asks for: the wallet's seed phrase. MetaMask and Ronin Wallet are the primary tools targeted. These are the wallets most Axie Infinity players use. The attacker knows this.
Crypto gaming players are disproportionately vulnerable here. Many are first-time wallet users. They have learned how to install MetaMask, how to receive SLP or AXS, and how to breed an Axie. They have not learned the one rule that governs every self-custodial wallet: the seed phrase is the wallet. Give it to anyone, and your assets can be drained in minutes.
The social dynamic of game communities compounds the risk. Players join large Discord servers looking for help. They post error messages in public channels. Scrapers harvest those messages. A scammer then DMs with a solution - authoritative, patient, and wrong.
The "out of gas" error is especially effective because it is a legitimate failure that players actually encounter. A real transaction can fail because the gas limit set by the wallet was too low for the contract call. Someone new to crypto sees this, panics, and searches for help online. The search result they find is not official support. It's a phishing form.
There is no off-chain customer support that can recover a failed transaction. There is no site where you enter your seed phrase to "validate" a wallet. The only way to fix an out-of-gas error is to resend the transaction with a higher gas limit. No external actor needs to be contacted.
The Ronin bridge hack, discussed elsewhere on this site, was a different class of exploit - it involved compromised validator keys, not user seed phrases. But the aftermath made users more anxious about their wallets, and more willing to talk to strangers claiming to be support.
Scammers adapt. After the Ronin bridge exploit was disclosed, impersonators shifted their pitch: "Your wallet may have been compromised in the attack. Contact support immediately to secure your funds." The same sink, a different lure.
The takeaway is simple and applies across all wallet types. No support team for any crypto game, including Axie Infinity and Sky Mavis, will ever message you first. No official site will ask for your seed phrase or private key. The only people who need that information are you - and the people you want to help take everything.
If someone on Discord or Twitter claims to be support and directs you to a site that requests your seed phrase, the site is fake. The wallet is already at risk if you proceed. The fix for a failed transaction is resending it. The fix for a seed phrase given to a scammer is nothing. The assets are gone. There is no refund. No appeal. The blockchain does not care who sent the DM.
Not financial advice. whoisebert.xyz publishes market data and general information about digital assets. Crypto assets are volatile and you can lose everything you put in. Nothing here is a recommendation to buy, sell or hold, and we make no price predictions.
Prices are sourced from third parties and may be delayed or wrong. Verify anything you intend to act on against a primary source.