Quick answer
Only install from official links you typed or saved yourself—not from search ads, DMs, or “support” agents. A real non-custodial wallet like My Wallet will never need your seed phrase to “verify,” “boost,” or “unlock” anything. If an app demands the 12/24 words up front without a clear import flow you initiated, stop.
Why fakes work
- Brand names are easy to misspell in store listings.
- Screenshots and icons are trivial to copy.
- Victims are rushed (“your wallet will be deleted in 1 hour”).
- Seed entry looks normal during legitimate import—fakes abuse that screen.
Red flags before you install
- Download link arrived in a DM, Telegram reply, email, or pop-up.
- Search ad sits above the real site—check the URL character by character.
- Publisher name is a lookalike (
MyWallet Official Support LLCstyle noise). - App asks for seed immediately with fear language.
- Reviews are all five-star clones posted the same week.
- Spelling errors in the brand: My Wallet vs random “MyWall3t” builds.
- Requests for seed and SMS codes, remote desktop, or screen share.
Red flags inside a “wallet”
- “Support mode” that uploads your phrase.
- Airdrop claim that needs mnemonic entry on a website.
- Transaction prompts you do not understand—especially infinite token approvals.
- Customer “agent” in chat asking you to type words to prove ownership.
Official My Wallet support (@mysupport and documented channels) will not ask for your seed. Same rule for MetaMask, Phantom, Keeper, Rabby, Trust Wallet, Coinbase Wallet, and Ledger support.
Verification checklist
| Check | Pass looks like |
|---|---|
| Source | get.mywallet.io or official store listing linked from the real site |
| URL | Exact domain; HTTPS; no extra hyphens/subdomains you do not recognize |
| Publisher | Matches what the official site names |
| Permissions | No bizarre demands unrelated to a wallet |
| Community | Cross-check announcement channels you already trust—not a new “help desk” |
When in doubt, do not import a seed with real funds. Create a fresh empty wallet first and test.
If you already typed a seed into something shady
- Treat the phrase as burned.
- On a clean device with a verified app, create a new wallet.
- Move funds from the old wallet to the new address immediately (you may still have access until thieves finish draining).
- Never reuse the burned phrase.
- Review approvals on smart-contract chains if you signed unknown permits.
Healthy habits
- Bookmark official download pages.
- Prefer app-store links from the project site over generic search.
- Keep a hardware cold path for large balances (hot vs cold).
- Talk through scams with friends new to crypto—social pressure helps more than jargon.
Download My Wallet
Download My Wallet from the official link every time; you hold the seed—nobody else should ask for it.
FAQ
Can the App Store / Play Store host fakes?
Listings get abused. Publisher identity and the link path from the official website still matter.
Is a browser bookmark enough?
Bookmarks help. Still re-check after password-manager autofill to a lookalike you once mistyped.
What about WalletConnect QR codes?
Only scan codes on sites you intended to open. A QR can initiate signatures the same as a malicious button.
Does My Wallet store my seed on a server?
No. Non-custodial means the phrase stays with you. Anyone claiming they can “look it up” for you is lying.