Seed phrase

A seed phrase is a series of words that records access to a wallet. With those words a wallet can be set up again on another device. Whoever holds the seed phrase effectively holds the access, which is why the series is kept carefully.

What it may indicate

Losing or sharing a seed phrase can have major consequences, but it does not automatically mean something is wrong. Sometimes it is carelessness, in other cases deception. What actually happened only emerges from investigating the transactions that followed.

Someone is pressured into sharing the words of a recovery phrase in order to unlock something. Shortly afterwards, amounts leave the wallet. The pattern can point to misuse of that access, but full clarity only follows after investigation.

What is a seed phrase?

A series of words with which access to a wallet can be restored. Whoever has the series effectively has access to the wallet.

What happens if a seed phrase is shared?

Sharing it can give someone else access, which may lead to funds being moved. Whether misuse occurred only emerges from investigating the transactions that followed.

What can you do if someone has seen your seed phrase?

Assume the wallet is no longer safe. Set up a new wallet with a new seed phrase and move the balance there while that is still possible. Report it as well, and keep all transaction details.

May you give your seed phrase to an investigator?

No, and it is not necessary either. Blockchain investigation works with public addresses, transaction hashes and your own overviews. Anyone who does ask for your seed phrase should be treated with suspicion.

Is a seed phrase the same as a password?

Not quite. A password can usually be reset, a seed phrase cannot. The words are the key itself, so losing them or letting them leak has immediate consequences for access to the balance.

How a seed phrase changes an investigation

Once a recovery phrase has been seen by someone else, the balance is no longer under sole control, and that has consequences beyond the immediate loss. Anyone holding the phrase can move funds at a moment of their choosing, including weeks later, so the timeline in a file often shows a quiet period followed by a sudden series of transfers. That pattern helps to date the moment of compromise, because the first unauthorised outgoing transaction gives a lower bound for when the phrase left the holder.

What we can do with the material is limited but concrete. The addresses derived from a compromised phrase can be followed on-chain, the destination of each transfer can be recorded, and any cash-out at a registered provider can be named in a report so that the police or an exchange can act on it. What we cannot do is reverse a transfer, and no honest party will promise that. Anyone who claims a phrase can be repaired or funds pulled back is describing something the technology does not allow.

External sourceThe UK national fraud reporting service publishes plain protection advice for individuals, including how criminals build enough trust to get people to share the details that give access to an account. The pattern it describes matches what we see around recovery phrases: the request usually arrives as help, support or a security check rather than as a demand. The guidance is at Report Fraud: protecting yourself.

Your own situation

If you are reading this, you probably have a question about your own situation. That is exactly what Paucitas does.

The first step is contact by phone. We prefer to schedule that call through WhatsApp, so you do not have to wait. In the call we look together at what can factually be established in your case and what Paucitas can examine for you.

Go to the contact form