# Is Phantom safe? Check before you connect

> Phantom: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-25.

Canonical: https://tradingagentstack.com/check/phantom/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Phantom

# Is Phantom safe to connect?

Self-custody wallet · Solana, Ethereum, others. Checked 2026-10-25; every line links its source.

**Worst case:** Phantom is self-custody: anyone who gets your recovery phrase (for example through a fake Phantom extension or a 'support' DM), or who gets you to sign a malicious approval, can empty the wallet, and Phantom can't reverse or freeze anything.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Install only from phantom.com/download: Chrome Web Store ID bfnaelmomeimhlpmgjnjophhpkkoljpa, App Store id1598432977, Google Play app.phantom. Phantom has no Firefox add-on.

2. Phantom Support never messages you first. Only use the in-app chat, and never type your recovery phrase anywhere. After using a new dapp, revoke its spending permissions (Revoke.cash for EVM, Famous Fox's Revoker for Solana), because disconnecting doesn't revoke them.

3. Give bots and new dapps a separate Phantom account holding only what you can lose. Copy addresses from your own address book, not from transaction history or chat, to avoid address poisoning.

## What it can do with your money

| Who holds the keys | You hold the keys 'Phantom is a self-custodial wallet: you control your private keys.' Some extras run through third parties: Phantom Cash's card and virtual accounts need KYC done by Stripe, with the card issued by Lead Bank and run by Bridge (https://phantom.com/learn/blog/introducing-phantom-cash). Kalshi prediction markets (US) need identity verification. [source](https://help.phantom.com/articles/i-was-scammed-or-my-wallet-was-drained-what-can-i-do-5487893286291) |
| --- | --- |
| Can funds be sent out to any address? | Yes. You sign every send yourself, to any address. Phantom 'cannot reverse transactions, freeze assets, or recover stolen funds.' [source](https://help.phantom.com/articles/i-was-scammed-or-my-wallet-was-drained-what-can-i-do-5487893286291) |
| Swaps and third parties | In-app swaps are routed by third-party providers, including bridge providers for cross-chain swaps, and you can choose the provider for each swap. The confirmation screen shows a Phantom fee plus the network fee. Phantom can't reverse a swap or a send. Disconnecting a dapp does NOT revoke spending permissions: revoke them with Revoke.cash (EVM) or Famous Fox's Revoker (Solana). [source](https://help.phantom.com/articles/adjust-swap-settings-in-phantom-27085326202515) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `phantom.com`

- Website: `phantom.app`

- X: `@phantom`

- GitHub: `github.com/phantom`

- App: `https://chromewebstore.google.com/detail/phantom/bfnaelmomeimhlpmgjnjophhpkkoljpa`

- App: `https://apps.apple.com/us/app/phantom-trading-wallet/id1598432977`

- App: `https://play.google.com/store/apps/details?id=app.phantom`

Where we confirmed these
- https://phantom.com/download (links Chrome Web Store extension bfnaelmomeimhlpmgjnjophhpkkoljpa for Chrome/Brave/Edge and x.com/phantom; page source carries App Store id1598432977 and Google Play app.phantom)

- https://chromewebstore.google.com/detail/phantom/bfnaelmomeimhlpmgjnjophhpkkoljpa (developer website phantom.com, email support@phantom.app, 'Created by the owner of the listed website', 5,000,000 users, v26.34.0 updated 2026-10-19)

- https://apps.apple.com/us/app/phantom-trading-wallet/id1598432977 (seller Phantom Technologies Incorporated, developer website phantom.com, privacy policy phantom.app/privacy)

- https://play.google.com/store/apps/details?id=app.phantom (developer Phantom Technologies, Inc., website phantom.com, 10M+ downloads)

- https://github.com/phantom (GitHub-verified domain phantom.app; org links X @phantom)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-04-06 | Service outage: token prices and balances shown wrongly in the app. Phantom said 'Your funds are safe' and reported it resolved the same night. Users on X reported they couldn't sell (user reports, not verified). |  | resolved same day; Phantom said funds not affected | [source](https://www.theblock.co/post/396479/phantom-reports-service-outage) |
| 2026-02-10 | Address poisoning linked to Phantom's built-in chat (Phantom Chat, launched 2025-12-23): one user sent 3.5 WBTC (~$264,000) to a look-alike address. ZachXBT said the chat did not filter spam transactions (Cointelegraph, third-party report). (third-party report) | 3.5 WBTC (~$264,000) | not recovered (no Phantom comment in the report) | [source](https://cointelegraph.com/news/phantom-chat-address-poisoning-bitcoin-phishing) |
| 2025-07-03 | Koi Security found 40+ fake wallet add-ons on the Firefox store impersonating Phantom, MetaMask, Coinbase, Trust Wallet, Exodus, OKX and others to steal seed phrases (third-party report; extension IDs not given in the coverage). (third-party report) |  | reported to Mozilla | [source](https://thehackernews.com/2025/07/over-40-malicious-firefox-extensions.html) |
| 2024-10-28 | Outage during the GRASS airdrop: wrong balances shown for about 3.5 hours. Phantom told users 'Your funds are safe.' |  | resolved same day | [source](https://www.theblock.co/amp/post/323291/solanas-phantom-wallet-faces-downtime-causing-inaccurate-account-balances-for-users-during-anticipated-grass-airdrop) |

## Check a link

Got a link, @handle or repo that claims to be Phantom? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Phantom

We email you if we add an incident, a freeze report, a known fake or a deadline for Phantom. Free; unsubscribe anytime.

## More checks: Wallets
[MetaMask](https://tradingagentstack.com/check/metamask/)[Rabby Wallet](https://tradingagentstack.com/check/rabby/)[Trust Wallet](https://tradingagentstack.com/check/trust-wallet/)[Exodus](https://tradingagentstack.com/check/exodus/)[Backpack](https://tradingagentstack.com/check/backpack/)[Solflare](https://tradingagentstack.com/check/solflare/)[Coinbase Wallet](https://tradingagentstack.com/check/coinbase-wallet/)[Electrum](https://tradingagentstack.com/check/electrum/)[Keystone](https://tradingagentstack.com/check/keystone/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)