How to Spot a Fake Crypto Wallet Screenshot
A detection guide to fake crypto wallet screenshots: the seven visual tells that give them away, why none of them are proof, and the only verification that actually settles it.
Key Takeaways
- Visual tells narrow it down but never settle it. A screenshot is a picture of a claim, not evidence of a balance.
- The only thing that settles a claim about on-chain holdings is a public address checked on a block explorer, by you, on a device you control.
- We build a wallet simulator, so we know exactly how convincing this category has become — which is why we publish the tells rather than pretending they do not exist.
"A screenshot is a picture of a claim. An address is a claim you can check."
Why a wallet simulator company is writing this
The tells below are ours. Publishing them is the point, not a contradiction.
RPWallet builds a wallet simulator. It exists so creators, product teams and educators can show wallet screens without exposing real balances, addresses or activity — and it is sold on the explicit condition that it is never used to convince anyone that simulated balances are real. That condition only means something if the people on the receiving end know what to look for.
So this article gives away the tells. Every one of them is something we know because we had to solve it to build a convincing simulator, and every one of them makes our product marginally easier to detect. That is a trade we will take: a tool that helps you make a demo is a legitimate product, and a tool that helps someone take your money is not, and the difference between the two is entirely in whether the audience is informed.
Read the rest of this with one thing in mind, though. The tells are useful for triage, and they are not proof. Anyone competent avoids all of them in about ten minutes. The verification section at the end is the part that actually settles anything.
Seven tells, roughly in order of how often they appear
These catch careless fakes. They do not catch careful ones, and a screenshot passing all seven still proves nothing.
Most fabricated wallet screenshots are not made carefully. They are made quickly, by someone who wanted a number on a screen and did not think about the rest of the frame. That produces a fairly consistent set of mistakes.
- A browser address bar at the top of the frame. Wallet simulators that run in a browser leave one there unless the user installed the app to their home screen first. It is the single most common giveaway and the easiest to crop, which is why a suspiciously tight crop is itself a mild signal.
- Round numbers. Real balances carry long decimal tails from partial fills, fees and gas. Exactly 100.00 SOL or a portfolio total of exactly $1,000,000.00 is typed, not accumulated.
- Every position green. Real portfolios contain losers. A screen where all six holdings are up, and up by similar percentages, describes a market that has never existed.
- Arithmetic that does not close. Add the individual token values and compare them to the portfolio total. Fabricated screens edited in an image editor frequently fail this, because the editor changed one number and not the four that depend on it.
- Price and time disagreeing. If the screenshot shows a token at a price it last traded at in March, and the status bar clock says it was taken last night, one of the two is wrong.
- Placeholder or wrong-resolution token logos. A token row with a generic circle, or a logo noticeably blurrier than its neighbours, usually means it was imported rather than listed.
- A status bar nobody would ship. 11% battery, no signal, forty-seven unread notifications. Not evidence of anything, but it tells you the person was not being careful, which raises the value of every other check.
What the tells cannot do
Detection by eye has a ceiling, and the ceiling is lower than most people assume.
Every tell in the previous section is a mistake, which means every one of them is avoidable. Install the app to a home screen and the address bar goes away. Use irregular quantities and the round-number tell goes away. Set two positions at a loss and the all-green tell goes away. None of this takes skill or long.
This is the part people get wrong about screenshot detection generally. The visual tells filter out lazy fabrications, and lazy fabrications are the majority, so the method feels more reliable than it is. What it is actually doing is selecting for care. A screenshot that passes all seven checks tells you the person was careful. It does not tell you the balance is real.
It is worth being blunt about the consequence: if someone is asking you to send money, sign something, or hand over access, and their evidence is an image, you have not been given evidence. The quality of the image is not the variable that matters.
The verification that actually settles it
Public addresses are public. That is the whole mechanism.
Blockchains are public ledgers. Anyone holding assets on one has an address, that address's holdings are visible to anybody who looks, and looking is free and takes about fifteen seconds. So the entire question collapses to a single request: ask for the public address rather than a picture of it.
Then check it yourself. Open a block explorer you chose — not a link they sent you — and paste the address in. Solscan for Solana, Etherscan for Ethereum, mempool.space or any Bitcoin explorer for BTC. Read the balance off the explorer. That figure is on-chain data, and no screenshot, editing tool or simulator can change what an explorer returns.
Note what you are not asking for. A public address is the string people hand out to receive funds; sharing it is harmless. A seed phrase or private key is the opposite, and there is no verification scenario, ever, in which someone needs yours or you need theirs. Anyone who responds to a request for a public address by offering or requesting a seed phrase has answered a completely different question, and the answer is no.
- Ask for the public address, not a screenshot, not a video, not a screen share.
- Open a block explorer you navigated to yourself, and paste the address in.
- Check that the holdings match the claim, and that the account has a history rather than a single recent deposit.
- If the address is refused, deflected, or replaced with another image, treat that as the result.
If the screenshot is yours, label it
The other half of this problem is solved by the person posting.
Most simulated wallet content is not deceptive. It is a product demo, a design mockup, an educational walkthrough, a roleplay bit, a scene in something fictional. All of that is legitimate, and all of it stays legitimate for one reason: the audience knows what they are looking at.
So say it. A line in the caption noting the wallet is a simulation costs nothing on a piece of entertainment or a demo, and it moves the content permanently out of the category this article is about. The cost of not saying it is not primarily legal — it is that your work becomes indistinguishable from the thing everyone is now learning to detect.
Where the line sits is not ambiguous. Using simulated balances to induce someone to send funds, invest, buy a course, or extend credit is fraud regardless of the tool involved, and it is a prohibited use of RPWallet. The tool is not the variable. The claim you make with it is.
Frequently Asked Questions
Can you always tell if a wallet screenshot is fake?
No. Visual tells catch careless fabrications, which are the majority, but every tell is a mistake and every mistake is avoidable. A careful fabrication is not distinguishable by eye. This is why verification has to be a public address checked on a block explorer rather than an examination of the image.
What is the single fastest check?
Add up the individual token values and compare them to the portfolio total. Screens edited in an image editor often fail this, because changing one number does not change the figures derived from it.
Is a video or screen recording harder to fake than a screenshot?
Slightly, because the numbers have to move plausibly and the animations have to be right. It is not meaningfully harder with a tool built for it, and it is not verification. A recording is still a picture of a claim.
Should I ask someone for their seed phrase to verify holdings?
Never. A public address is all that verification requires, and it is safe to share. A seed phrase or private key grants control of the funds. There is no legitimate situation in which verifying a balance involves one.
Someone sent proof of funds and wants a deposit. What now?
Ask for the public address and check it on an explorer you opened yourself. If that is refused, you have your answer. Do not send funds, credentials or personal information on the strength of an image under any circumstances.
Want better wallet visuals?
RPWallet is built for polished demos, mockups, roleplay content, and entertainment-ready visuals that feel consistent across desktop and mobile.
Explore RPWallet