You receive a call from someone claiming to be official customer support, who accurately states the hash value of your recent crypto transaction and offers to "help you fix an exception". You might start to doubt: this must be real, right? After all, how could someone outside the platform know my transaction hash?
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
The answer is: Transaction hash (TxID) is public information that anyone can look up.
As soon as you send a transfer on the blockchain, the full record of this transaction — including its hash value, sending address, receiving address, and amount — is permanently and publicly stored on the chain. Anyone can find it using a block explorer.
So if a stranger can state your transaction hash, it only means they know one of your wallet addresses, it does not prove they are an official platform employee.
Step 1: Understand what a transaction hash is, and that anyone can look it up
Core goal: Recognize the public nature of transaction hashes, and break the wrong myth that "a hash equals private data".
A transaction hash (TxID) is the unique ID for every transaction on the blockchain, similar to a "receipt number" for your transfer. It is a 64-character hexadecimal string that records where the transaction came from, where it went, how much was sent, and how much network fee was paid.
But this "receipt number" is 100% public. All blockchain data is an open public ledger, anyone can enter a wallet address on a block explorer (such as Etherscan for Ethereum, mempool.space for Bitcoin, Tronscan for Tron) to check all transaction records and their corresponding hash values for that address.
Completion check: You understand that "a transaction hash is like a courier tracking number — anyone can look it up, and that does not mean the person who shares it works for the delivery company."
Step 2: How fake support scammers get your transaction hash
Core goal: Walk through the full scam chain to understand how scammers access your hash data.
Scammers usually get your transaction hash through 3 common channels:
Channel 1: You shared your wallet address with them If you posted or sent your wallet receiving address in a community group, trading group, or private chat, they can simply search that address on a block explorer to pull all your transfer records and their hash values.
Channel 2: Your address was exposed via on-chain activity All on-chain transaction records are fully public across the whole network, anyone can monitor fund flows on the blockchain. Scammers often track high-activity addresses, and as soon as they spot a large or frequent transfer, they can pull all transaction hashes for that address.
Channel 3: They trick you into sharing it via a fake "security verification" process Many scams pose as "transaction verification helpers", guide you to look up your transaction hash on a block explorer, and ask you to send them a screenshot of it. The hash you voluntarily send them then becomes the fake "proof" they use to claim their identity.
Completion check: You are clear that "a scammer knowing my transaction hash at minimum does not mean they logged into my account or stole my password".
Step 3: How to tell real support from fakes if they can name your transaction hash
Core goal: Share actionable methods to verify if a support representative is legitimate.
What you should do:
Method 1 (Most reliable): Call back via official channels Do not keep talking to the person who called you. Hang up immediately, open the official app yourself or manually type the official website URL, then contact official human support via the in-app "live chat" or "help center" page, and ask one simple question: "Did your team just contact me?"
Completion check: The official support rep will confirm or deny the outreach. If they say "we never contacted you", mark the previous call as a scam right away.
Method 2 (Auxiliary check): Ask them for extra verification info to catch scammers If someone claims to be platform support, you can ask: "What is my anti-phishing code?" (This only works if you have enabled this feature in your account settings first). Real official support can see your custom anti-phishing code stored in your account, while fake scammers will not be able to answer, and will immediately expose themselves.
Method 3 (Verify transaction authenticity): Check the data yourself via a block explorer If the person claims "there is an issue with this transaction that needs handling", open a block explorer yourself, enter your corresponding wallet address, and check the status of the transaction matching that hash. If the status shows "Success" and it has enough block confirmations, your transfer is fully processed and no extra "handling" is needed.
Completion check: You have confirmed the person's identity or the transaction status using at least one of the above methods.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Step 4: Match common scenarios where someone names your transaction hash
Scenario A: A stranger calls you out of the blue, claims to be platform support, and asks you to follow their instructions to operate your account
No matter how many small details of your transactions they can name, hang up the call immediately. No legitimate crypto platform will ever call you out of the blue to ask for sensitive information or guide you to make operations on your account. This is the most common type of scam, and public data shows that social engineering attacks from fake support cause massive losses in cybercrime, with elderly users being disproportionately targeted.
Scenario B: Someone in a community/OTC trade sends you a screenshot of a "successful transfer" hash
Do not trust screenshots alone, they can be easily edited and faked. Open your wallet app to check if your balance has increased, or enter your wallet address on a block explorer to confirm if there is a matching incoming transaction record. If you cannot find the record, pause the trade immediately and do not send any funds or goods.
Scenario C: Someone mentions your transaction hash in an email or direct message, but does not ask you to do any operations
Treat this as a standard phishing attempt: do not click any links, do not reply to the message, and manually log into your official platform account to check your status.
Post-operation check: You have connected with a real support rep via the in-app official support channel, and confirmed your account status is normal. Or you have verified via block explorer that your target transaction is fully processed and valid.
Next recommended action: Log into your crypto exchange or wallet, find the "anti-phishing code" feature in the security settings, and set a unique, easy-to-remember custom passphrase. This is the most direct tool you can use to spot fake support representatives in the future.
