Act from a trusted device and avoid irreversible changes before preserving the information already available.
Be wary of guaranteed outcomes
Real recovery depends on evidence, providers, timing, and sometimes authorities. A stranger promising certainty or claiming special access is a major warning sign.
Never reveal authentication secrets
No legitimate provider needs your password, one-time code, wallet seed phrase, or private key to assess an incident. Sharing them creates another compromise.
Verify independently
Confirm organizations and contact details through sources you find yourself. Pause if someone demands cryptocurrency, secrecy, remote access, or repeated release fees.
Remember
No legitimate recovery assessment requires your password, one-time code, wallet seed phrase, or private key. Verify providers independently.