I think my wallet or account is compromised

Work from the top. Skip the sections that don't apply to you.

Right now

1. Stop sending money. Don't pay any fee, tax or deposit to "unlock," "recover" or "protect" funds, whoever asks.
2. Don't share your seed phrase or allow remote access. Anyone "helping" who asks for either is part of the theft.
3. Disconnect the computer you suspect. If it may have malware, take it offline and use a different, trusted device for the next steps.

If a self-custody wallet's seed phrase or key was exposed, or funds are leaving

4. Create a brand-new wallet on a trusted device. A new seed phrase, not an import of the old one. Write it down properly.
5. Move what's left, most valuable first. You'll need a little of the network's coin for fees. If coins you send for fees vanish instantly, an automated "sweeper" is watching the wallet: stop sending more.
6. Revoke risky approvals. If you signed an approval or permit, revoke it with an approval checker, but treat moving funds as the real fix. See how to revoke.
7. Retire the old wallet for good. Never send anything to it again. Update saved addresses anywhere it was used.

If an exchange account is affected

8. Lock or freeze the account. Use the exchange's own lock feature, or contact support through the official app or website you type in yourself.
9. Secure your email first. Change its password, sign out other sessions, and check for forwarding rules or recovery options you didn't add.
10. Reset the exchange login. New password, authenticator app or security key instead of SMS, and remove unknown devices and API keys.
11. Check withdrawal addresses. Delete any you didn't add and turn on the withdrawal allowlist.

If your phone number was taken over

12. Call your carrier from another phone. Use the number on its official website. Get your number back and add a PIN and SIM-change lock. See SIM swap attacks.

Record and report

13. Save the evidence. Addresses, transaction IDs, website addresses, usernames, screenshots of messages, dates and amounts.
14. Report to the FBI and FTC. File at ic3.gov and reportfraud.ftc.gov. It's free, and fast reports give the best chance of a freeze.
15. Tell the exchanges involved. The one you sent from, and any exchange the stolen funds reached, so they can flag the addresses.
16. File a local police report. It gives you a case number for your bank, insurer or tax records.

Protect yourself from the next scam

17. Ignore anyone offering to recover funds. Fake lawyers, hackers and "FBI agents" target new victims. Law enforcement never charges a fee. Read recovery scams.
18. Talk to someone you trust. Scammers count on shame and secrecy. If you feel overwhelmed, call or text 988 in the US, any time.

All 18 checked. If anything along the way felt wrong, trust that feeling and wait.

Your ticks are saved only in this browser, so you can come back to them. Nothing is sent anywhere.