What happens if you share your screen during a crypto support call?
If you share your screen during a crypto support call with someone who is not a legitimate support agent, you are giving them direct visibility into your wallet addresses, balances, transaction history, private keys if they appear on screen, and any passwords or recovery phrases you type. In a typical scam scenario, the caller will claim to be from a crypto exchange, wallet provider, or tech support service, and will ask you to share your screen to "help" with a problem. Once you do, they can see everything on your monitor, including browser tabs, password manager entries, and two-factor authentication codes. The scammer then uses that information to drain your accounts or lock you out.
How the screen-sharing scam works
The scam follows a predictable sequence. Understanding each step helps you recognise it before it is too late.
Step 1: the initial contact
Scammers reach you by phone, email, or direct message. They often claim there is an urgent issue with your account - such as a suspicious login attempt, a frozen withdrawal, or a security breach. The tone is professional and urgent. They may already know your name, email address, or part of your crypto wallet address from a previous data leak.
Step 2: building trust
The caller will direct you to a legitimate-looking website or send a link that appears to belong to a real exchange or wallet service. They may ask you to verify your identity by logging in. At this point, you are on a phishing site that looks identical to the real one. Any credentials you enter are captured.
Step 3: requesting screen sharing
The scammer will say they need to see your screen to guide you through a fix. They will recommend a screen-sharing tool such as AnyDesk, TeamViewer, or a browser-based sharing function. Some will ask you to use the built-in screen sharing feature of a video call app. The stated reason is usually to "check your settings" or "verify your wallet configuration."
Step 4: Observation and Extraction
Once screen sharing begins, the scammer watches everything you do. They note: - Your open browser tabs, including any exchange or wallet pages. - Your wallet addresses and balances. - Any passwords or recovery phrases you type. - Codes from authenticator apps or SMS messages. - Private keys if they are stored in a visible file or password manager.
In some cases, the scammer will ask you to perform actions on your screen - such as clicking buttons or entering codes - while they watch. They may also use remote control features to take over your mouse and keyboard.
Step 5: the drain
After gathering enough information, the scammer either logs into your accounts directly or instructs you to send cryptocurrency to a wallet they control, claiming it is for a "security test" or "verification deposit." Once the transfer is complete, they disappear.
What information is at risk
Screen sharing exposes more than you might expect. Even if you do not type your private key or seed phrase, the scammer can see:
- Wallet addresses: They can look up your transaction history and balances on the blockchain.
- Exchange account details: Your username, balance, and any two-factor authentication setup.
- Password manager entries: If you autofill a password, the field may be visible for a moment.
- Email inbox: They can see password reset links or security notifications.
- Browser bookmarks: They can identify which exchanges or wallets you use.
Why scammers prefer screen sharing over phishing alone
Screen sharing gives the scammer real-time information. They do not have to guess your password or wait for a phishing link to be clicked. They can watch you log in, see your two-factor code appear, and use it immediately. This bypasses many security measures that rely on secrecy.
How to Recognise a Screen-Sharing Scam
Legitimate crypto support teams will never ask you to share your screen. Reputable exchanges and wallet providers have secure, documented procedures for resolving account issues. If a caller requests screen sharing, treat it as a red flag.
Other warning signs include: - Unsolicited contact from someone claiming to be support. - A sense of urgency or pressure to act immediately. - Requests to install software you have never used before. - Instructions to visit a website that looks slightly different from the real one (check the URL carefully). - Requests to enter your private key, seed phrase, or password while sharing your screen.
What to do if you have already shared your screen
If you realise you have shared your screen with a scammer, act quickly.
- End the screen-sharing session immediately.
- Disconnect from the internet to prevent further remote access.
- Move any cryptocurrency from the exposed wallet to a new wallet with a fresh seed phrase that was never displayed on that computer.
- Change passwords for all accounts that were visible during the session.
- Enable two-factor authentication on every account that supports it.
- Check for any unauthorized transactions or changes to your accounts.
- Contact the legitimate support team of any exchange or wallet you use, and report the incident.
The Bottom Line
Sharing your screen during a crypto support call is one of the most direct ways to hand over your account access to a scammer. No legitimate support agent will ever ask for it. If someone does, hang up, block the contact, and secure your accounts immediately. The damage happens in seconds, but the recovery takes much longer.
Not financial advice. watifsol.xyz publishes market data and general information about digital assets. Crypto assets are volatile and you can lose everything you put in. Nothing here is a recommendation to buy, sell or hold, and we make no price predictions.
Prices are sourced from third parties and may be delayed or wrong. Verify anything you intend to act on against a primary source.