When “Support” Isn’t Really Support
Scammers are getting craftier every year. They’re no longer just spamming email or SMS – they’re calling you, leaving voicemails, pretending to be support, “security”, law enforcement, or even your own wallet provider. These scams are especially dangerous in crypto, because so much of your security depends on “secrets” you hold (seed phrases, two-factor codes, etc.). Once those are exposed, the damage is often irreversible.
Below, we break down what these over-the-phone scams look like (including recent voicemails we’ve collected), how they relate to schemes Ledger and others have warned about, and what to do if you ever get one.
Real Voicemail Examples
We’ve gathered a few voicemails that show how these scams tend to sound in practice:
🎧 [Voicemail Scam Audio #1 – “Security Breach”]
Transcript: Code is 5 1 7 0 9 2. If you did not request this code, please press 1 now to speak with a Binance representative.
🎧 [Voicemail Scam Audio #2 – “Recovery Urgent”]
Transcript: Contacting you because there was a recent attempt to change the primary email address associated with your Binance account. Additionally, there was an API request attempting to gain access to a linked external wallet. If you did not initiate these actions, please press 1 to speak with a Binance support representative. If you did authorise these changes, you may hang up.
In these messages, the caller claims urgent action is needed because of “unauthorised withdrawals” or “security issues.” They may reference an email you supposedly got, or a case number, to make things feel legitimate.
How the phone scam usually unfolds
- Impersonation: The caller claims to be Ledger, Binance, your bank, the ATO, or even police. They may reference an email “case number” to sound legit.
- Manufactured urgency: “Funds at risk”, “account will be frozen”, “legal action pending”, or “your SMSF is non-compliant”. ATO scams often demand payment via crypto (a red flag).
- Extraction: You’re pushed to visit a fake site, install software, share your 24-word phrase, or transfer assets to a ‘safe’ wallet’. Once you comply, assets are usually moved offshore and are near-impossible to recover.
Real-World Examples
- Ledger database leak fallout: After Ledger’s 2020 data breach, Australian customers reported scam calls referencing their actual email and postal details. This made the fraudsters sound legitimate.
- ATO impersonation: The ACCC’s Scamwatch regularly warns about ATO phone scams demanding crypto payments for “tax debts” or “penalties.” The ATO has confirmed it will never demand payment in crypto.
- Police and law enforcement scams: Victims have been told by fake “AFP officers” that their crypto was linked to crime, and they must move funds to a “secure wallet” pending investigation.
How to Spot a Crypto Phone Scam
Here are red flags to watch out for:
- The caller claims to be from your wallet provider (Ledger, Coinbase, Binance, etc.) but you did not initiate contact or open a support ticket.
- They ask for your 24-word recovery phrase, private keys, or seed phrase.
- They direct you to click a link, install software, or visit a website that is not the official site.
- They threaten dire consequences (loss of access, legal action, account freezing) to force you to comply now.
- They say you must act immediately or risk permanent loss.
- They reference an email, breach, or case number you don’t recognize (or that wasn’t from the official support account).
- The phone number or caller ID is strange, or the call comes from overseas with odd accent / background noises.
- They ask for payment in crypto or through non-traditional channels (gift cards, cryptocurrencies, etc.).
- Threats: “account frozen in 2 hours,” “legal action pending,” or “funds lost if you don’t act now.”
Guidance from Providers & Regulators
- Ledger: Never calls customers. Any phone call claiming to be Ledger is a scam.
- Binance Australia: Communicates only via its official app and portal.
- ATO: Never demands tax or penalties be paid in crypto or gift cards.
- ASIC & ACCC Scamwatch: Advise Australians to hang up on unsolicited crypto calls.
- ACMA: Works with telcos to block known scam numbers – report them.
What You Should Do If Contacted or Already Affected
Hang up immediately if you suspect anything unusual.
- Verify independently: Use phone numbers from official sites, check your account status via the official app / site, or contact support via their verified channels. Do not use a number provided to you in a call or voicemail.
- Check whether you initiated something: If you never made that support request / opened that case, then it’s almost certainly fraudulent.
- Do not share your secret recovery phrase or private keys with anyone for any reason. No legitimate support staff will ask for it.
- Lockdown accounts: Enable 2FA (authenticator app, not SMS), set withdrawal whitelists, and use anti-phishing codes where available.
- Change passwords on accounts potentially exposed; check for unauthorised logins.
- Use tools to check permissions / revoke third-party access (for example, Etherscan / other blockchain explorers to see if your wallet has approved any bad contracts).
- Report the incident: to the exchange / wallet provider, to law enforcement, and in some countries there are dedicated cybercrime authorities. Also report the phone number (if known) to your telecom provider.
Why Scams Continue
- Crypto is irreversible – once someone has access, there is almost no recourse.
- Many people are still new to the space; they don’t know what a “recovery phrase” is, or assume support might need it.
- Scammers gather data from leaks, public profiles, etc., to make their approaches seem real.
- Fear works – people don’t want to lose access to their money, so urgency is a powerful lever.
How to Protect Yourself Proactively
- Store your recovery phrase offline, in a secure place. Never digitally store it or share it.
- Use hardware wallets, avoid trusting software that’s not verifiably from official sources.
- Make sure the contact info for your wallet or exchange is bookmarked in your browser; avoid clicking on links in emails / messages claiming to be from support.
- Set up alerts: access to your wallet, withdrawals, unknown device logins, etc.
- If possible, avoid using SMS for 2FA; use authenticator apps or hardware tokens.
- Educate family / friends who may be less tech-savvy; these scams often target older or more trusting people.
The Final Buzz
Over-the-phone crypto scams are growing not just in frequency, but in sophistication. They combine fear, urgency, false authority, pieces of real data, and layered channels to trick people.
If you receive any unsolicited phone call about your crypto or wallet – check independently, stay calm, verify everything.
If in doubt: hang up. Don’t share your seed phrase. Use official channels.
Stay safe. Stay smart. Be Crypto Safe.
Education is your best defence. Unlock member-only guides, checklists, and tools designed to protect your crypto, stay safe and be compliant.
