Zcash scams to avoid in 2026
The most common Zcash scams in 2026 are fake web wallets and look-alike sites that ask for your seed phrase, fake wallet apps, fake support or migration help after the Ironwood upgrade, requests for viewing keys and giveaway or airdrop offers. No legitimate wallet or team will ever ask for your seed phrase, and Zodl has no web version.
Scammers follow attention, and Zcash got a lot of it in 2025 and 2026: a price rally, a rebrand from Zashi to Zodl, a security flaw and a pool migration. Each event created confusion that scammers exploit. This page lists the patterns we have seen, with real examples, and the habits that protect you.
Three rules that stop most scams
- Never type your seed phrase into a website, form, chat or email. Your 24 words go only into the wallet app you are restoring, on your own device.
- Type wallet addresses yourself or use a bookmark. Do not click wallet links in search ads, social posts or messages. Phishing copies of wallet sites are common.
- Nobody legitimate contacts you first. Wallet teams, exchanges and Zcash organisations do not DM you offering help.
Fake web wallets
"Zcash web wallet" is an active lure because no mainstream, trustworthy browser wallet exists. Examples:
- myzodl.com, titled "Zcash Web Wallet | Zodl", asked visitors to restore or import a wallet, capturing seeds. Flagged on 8 August 2026, offline since 11 September 2026 (PhishDestroy). The real Zodl is a mobile app and has no web version.
- zcash-foundation.com, registered in October 2025 and flagged as a wallet drainer on 29 October 2025, was still serving content on 24 October 2026 (PhishDestroy). It is not the Zcash Foundation.
- Several free site-builder pages with "zcash-wallet", "auth" or "login" style subdomains rank in search. We have not confirmed them as scams, but they offer no real download and match known lure patterns. Treat them as suspicious.
Read our Zcash web wallet guide for what actually exists in the browser.
Fake wallet apps and downloads
Fake apps copy real wallet names and icons. In April 2026 Kaspersky reported 26 phishing wallet apps on Apple's App Store that stole recovery phrases (not ZEC-specific, but the same method). Back in 2019, a fake ZecWallet "update" spread malware from a look-alike GitHub repository. Protect yourself:
- Install only from the developer's official site or the app store listing it links to. Check the developer name.
- Be wary of brand-new apps with few reviews using a known wallet's name.
- Remember the 2026 name changes: Zashi is now Zodl, and YWallet's successor is Zkool. Scammers use outdated names. See best Zcash wallets.
Fake "migration help" and recovery
After the Orchard vulnerability and the move to Ironwood, some holders worried their funds were stuck. Fake support accounts offer to "migrate", "rescue" or "unlock" Orchard funds if you share your seed or send a fee. Real migration happens inside your own wallet app; see the Orchard to Ironwood guide.
Requests for viewing keys
A viewing key cannot spend your ZEC, so some people share it carelessly. But it reveals your full balance and history, permanently, which tells scammers who is worth targeting. Requests for viewing keys from strangers are a red flag (BloFin, Aug 2026). See viewing keys.
Scam messages in memos
Shielded transactions can carry an encrypted memo. Scammers send tiny amounts with memos pointing to fake support, fake airdrops or fake "security alerts". Treat any memo from an unknown sender as untrusted and never follow instructions in one.
Giveaways and airdrops
A fake Zcash Twitter account with more than 6,000 followers promoted coin "distributions" in 2020. The pattern never died: "send 1 ZEC, get 2 back" is always a scam. ZEC has no airdrops, so any "ZEC airdrop" claiming you must connect a wallet or enter a seed is a scam.
Other patterns to know
- Clipboard malware swaps a copied address for the attacker's. Check the first and last characters after pasting.
- Fake exchanges and "investment platforms" show fake profits and then demand fees to withdraw.
- Romance and job scams build trust over weeks before asking you to buy and send ZEC.
- Impersonated ETF or company news. The Grayscale ZCSH ETF and the ZODL company are real; "presales" or tokens using their names are not.
If you think you have been scammed
- If you entered your seed anywhere, assume it is compromised. Create a new wallet on a clean device and move any remaining funds immediately.
- If you shared a viewing key, remember it cannot be revoked. Move funds to a new wallet to stop future visibility.
- Report the site or account to the platform hosting it and to your national fraud authority.
- Be very wary of "recovery services" that contact you afterwards. They are usually a second scam.
Check your setup with our privacy checklist and validate addresses with the address validator.
Frequently asked questions
Is there an official Zcash web wallet?
No mainstream, trustworthy browser wallet exists, and Zodl has no web version. A site called myzodl.com posing as a Zodl web wallet was flagged as phishing in August 2026.
Will Zodl or the Zcash Foundation ever ask for my seed phrase?
No. No legitimate wallet, exchange or Zcash organisation will ask for your seed phrase. Anyone who does is trying to steal your funds.
Is it safe to share my viewing key?
It cannot be used to spend, but it reveals your balance and history permanently. Never share it with someone who contacted you first.
Are ZEC airdrops real?
ZEC has no airdrops. Treat any ZEC airdrop or giveaway that asks you to connect a wallet, enter a seed or send coins first as a scam.