The standard script
A branded profile offers help, moves you to a private channel, and asks you to "validate", "synchronise" or "restore" your wallet on a form. The form requests the recovery phrase. Some skip it and request a remote-desktop session instead.
A variant asks for an upfront fee to "unlock" or "recover" funds. The fee is the product; nothing is ever recovered.
Why the branding is convincing
Logos, banners and handles are copied from the real accounts. Some impersonators maintain profiles for months and post normal content to build history. Group names are duplicated so a search returns the fake alongside the real one.
Judging authenticity by appearance does not work. Judging by behaviour does.
Urgency is the common thread. Every version of this introduces a deadline, whether it is funds at risk, a window closing or an account about to be locked, because deliberation is the thing that defeats it. A real problem with your wallet does not expire in ten minutes.
The behavioural tells
They contacted you first. They moved the conversation to private immediately. They created urgency. They asked for a phrase, a key, a password, remote access, or an upfront payment. Any one of these is sufficient.
A real team answers in public, does not need your phrase, and has no mechanism that requires your key.
What FBT Swap will never do
We will never message you first. We will never ask for a recovery phrase, a private key or a wallet password. We cannot reverse a transaction, unfreeze funds or recover a lost phrase — and we say so rather than implying otherwise.
The only contact address is fbtswap@gmail.com and the only domain is fbtswap.ir. Anyone else using the name is impersonating the project.