1The one rule
Every scam below is a different story that ends the same way: you type your words somewhere, or you send coins somewhere, because someone made it feel urgent, official or too good to miss. Once you know the ending, the stories are easy to spot.
Three more things that are true of every real Divi tool:
- A real wallet asks for your phrase only when you choose "restore" or "import", never to "verify", "sync", "validate" or "unlock rewards".
- A real address check, balance check or transaction look-up needs only your address, which is public. The explorer shows everything without any secret.
- Sending DIVI is final. There is no refund button, no support ticket, and nobody who can reverse it (see Send DIVI).
2Fake support accounts
You ask a question in the Divi Telegram group or on X. Within minutes you get a direct message from "Divi Support", "Admin", a name that copies a real team member's name and photo, or a friendly stranger who "had the same problem". They are helpful, patient and quick, and sooner or later they send you a link or ask for your phrase "to check your wallet from our side".
How to tell a copycat from the real account:
- On Telegram, open the profile and read the username (the part after
@), not the display name. Display names and photos can be copied; usernames cannot be shared. A name with an extra letter, a swappedlandI, or an underscore is a different person. - A real admin is listed under the group's member list as an admin. The scammer is not.
- Check whether the account that messaged you is even in the group. Most are not; they read the public chat and message from outside.
- Block and report the account, then say so in the public group so the next person is warned.
The same goes for "support" email, "support" phone calls, and comments under Divi posts on X and YouTube with a "support" link or a WhatsApp number. Divi's only support address is support@diviproject.org, and even that will never ask for your phrase; there is no phone line and no WhatsApp.
3"Validate your wallet" sites
A website, usually linked from a fake support message, an ad or a comment, offers to validate, synchronise, rectify, connect or migrate your wallet, fix a "pending transaction", "claim your staking rewards" or "upgrade to Divi 3.0". It looks professional, lists every wallet brand you have heard of, and ends in a form with 12 or 24 boxes.
The form is the whole site. The moment you press the button, the words go to the scammer, who restores your wallet on their computer and empties it before you have closed the tab. Everything on the page before the form exists only to get you there.
Related tricks that lead to the same form:
- Fake explorer or "rewards" pages that show a big balance waiting for you, "unlockable" by entering your phrase. A real explorer never asks for anything but an address.
- Airdrop and "Divi 3.0 migration" pages. A real upgrade is a new version of the wallet software, downloaded from the official site. It never needs your phrase, and there is no migration form.
- "Connect wallet" buttons on sites you did not go looking for. A real connection with the IronDivi browser extension opens the extension's own "Connect Site" window with an Approve button; it never asks you to type your phrase into the website.
- Look-alike web addresses:
divi-project.org,diviproject.co,divi-services.com. The real ones are listed in section 7. Type them yourself rather than following a link.
4Giveaways and doubling
"To celebrate [anything], send between 1,000 and 100,000 DIVI to this address and we will send back double." It comes as a post from an account styled as Divi, as a reply under a real Divi post, as a live-streamed "event" on YouTube with a fake viewer count, or as a direct message saying you have "won" and need to pay a small fee to release the prize.
The US Federal Trade Commission puts it in one line: "Only scammers demand payment in cryptocurrency." That covers "verification fees", "tax on winnings", "gas to unlock the airdrop" and "deposit to activate staking".
5Fake wallets and extensions
A fake wallet is the laziest scam: an app or browser extension that looks like a Divi wallet, lets you create or import a wallet, and sends every phrase it sees to its author. Some work perfectly for weeks before the coins vanish.
What is real, checked on 2026-10-21:
| Wallet | Where the real one comes from | Watch out for |
|---|---|---|
| IronDivi node | github.com/DiviDomains/IronDivi | Builds from any other repository or download site. |
| IronDivi Web Wallet | services.divi.domains only | Copies on any other domain. The web wallet runs in your browser and never sends your phrase anywhere, but a copy can. |
| IronDivi browser extension | Not in the Chrome or Firefox stores today. It is installed from the official IronDivi code only. | Any store listing calling itself a Divi or IronDivi wallet. |
| IronDivi Telegram wallet | @divi_wallet_bot, linked from services.divi.domains/telegram/wallet/ | Bots with similar names, and any bot that asks you to type your phrase in chat (the real one's /wallet and /restore open its own app screen; it never asks for the words in the chat). |
| Divi Desktop | diviproject.org/downloads | Installers from file-sharing sites, forum posts or direct messages. |
| BoxWallet | github.com/richardltc/boxwallet | Anything else called BoxWallet. |
| Mobile apps | We could not verify any current official Divi app in the Apple or Google stores. | Treat every app-store "Divi wallet" as unverified until an official link on diviproject.org points at it. |
If you are unsure whether a wallet is real, try it with a brand-new testnet wallet and free testnet coins first, never with the phrase of a wallet that holds real DIVI. Choose a wallet describes each real one.
6Guaranteed returns and investment managers
Someone offers to stake, trade or "manage" your DIVI for you at a guaranteed rate: 5% a week, 300% a year, "risk-free arbitrage". Sometimes it starts as a friendship or a romance that drifts into money talk. Sometimes it is a slick site with a dashboard showing your balance growing. You can even withdraw a little at first. Then a withdrawal needs a "tax" or "fee", and then the site and the person are gone.
The FTC's other two lines fit here: "Only scammers will guarantee profits or big returns" and "Never mix online dating and investment advice."
7Where the real Divi lives
Bookmark these and type them yourself. Each was checked on 2026-10-21; the short Divi links forward to the real channel, so you can check where you landed.
| What | Address | Lands on |
|---|---|---|
| Website | diviproject.org | diviproject.org |
| Telegram group | telegram.diviproject.org | t.me/diviproject |
| Discord | discord.diviproject.org | discord.gg/diviproject |
| X (Twitter) | twitter.com/diviproject | x.com/diviproject |
| IronDivi code | github.com/DiviDomains/IronDivi | GitHub |
| Divi services, explorer, wallets, tutorials | services.divi.domains | this site |
More in Official links and The official Telegram. Two things to remember about the real channels: anyone can join them, including scammers, so a message inside the real group is not automatically safe; and the Divi chatbot on this site answers questions but will never ask for your phrase, passphrase or key. If it ever seems to, close it and tell the group. Get help safely shows how to ask a question without exposing anything.
8If you already typed it in
Speed matters more than anything else now. A phrase that has been typed into a scam site is in the scammer's hands within seconds, but their script may take minutes or hours to drain every address.
- Make a brand-new wallet right now with a new recovery phrase, in a wallet you trust (Create a wallet). Do not reuse any part of the old one.
- Send everything to the new wallet: every coin in the old wallet, in one transaction if you can. Pay the normal fee; do not wait for a "better time". If some coins are staking or in a vault, Rescue a wallet covers getting them out.
- Watch the new address in the explorer until the transfer confirms, then save the new phrase in your password manager and stop using the old wallet for ever.
- If you typed in only a passphrase (the password that unlocks your wallet file), not the phrase, the scammer still needs your wallet file. Change the passphrase, and if the file could have been copied (malware, a shared computer), move the coins anyway.
- If you sent coins to a scammer, they cannot be recalled. Keep the txid and screenshots; report to the platform where the scam ran and, in the US, at reportfraud.ftc.gov. Then beware of the second scam: "recovery services" who promise to get your coins back for a fee are the same people.
9The checklist
Before you type, click or send, run through this. Any "yes" means stop.
- Is anything asking for my recovery phrase, passphrase or private key?
- Did this person contact me first, privately?
- Do I have to send coins to receive coins, a prize, a refund or a reward?
- Is someone promising a return, a rate or a guarantee?
- Did I get here from a link someone sent me, rather than typing the address myself?
- Am I being hurried: "only today", "your wallet will be lost", "last chance"?
When all six are "no", you are probably fine. And if a message in the Divi group reads like one of these stories, say so in public. That warning is how most people are saved.
If something goes wrong
I'm not sure whether a message or site is real. Assume it is not, and ask in the public Telegram group with a screenshot, never with your phrase. Get help safely shows what is safe to share.
I think my phrase may have leaked but nothing has been taken yet. Follow section 8 anyway. A leaked phrase stays leaked for ever; coins moved to a new wallet are safe.
Still stuck? Ask the Divi chatbot, or see all tutorials.