David Schwartz, Ripple’s CTO emeritus, has flagged a suspicious Android notification that appeared to come from the SecuX wallet app. He described it as a scam and warned users not to enter wallet recovery phrases.
A notification that looked like a security alert
Schwartz said the alert looked like it came from SecuX. An X user told him not to tap it. He had already tapped it, likely out of curiosity, to see what would happen. The app opened normally, and nothing seemed off at first. The problem showed up when he checked his notification history.
There, he found a message claiming that funds might be at risk and that a critical vulnerability had been detected in the SecuX wallet. The message told users to verify their wallet immediately and included a link. Schwartz said the link led to a scam page that asked for a 12- or 24-word recovery phrase. That phrase can restore a wallet and give anyone who has it control of the funds.
He warned users never to enter those words. The detail matters because the first tap did not expose the full message. The notification history did. That may make the scam harder to spot for users who only glance at an alert and dismiss it.
SecuX maintenance adds context, not a clear answer
The warning came after SecuX, a cold wallet provider, told the crypto community about emergency maintenance for its app. On October 16, the company said the app was going through a major system upgrade and emergency maintenance to improve security and stability. SecuX did not disclose the nature of the emergency issue. It is not clear whether that maintenance is connected to the notification Schwartz saw.
The origin of the notification is also unknown. It could have come from the app itself, a third-party notification service, or another source. The available information does not independently establish that SecuX’s app or infrastructure was compromised. That distinction is important. A fake alert can mimic a real brand without breaking into its systems.
What users should do
SecuX urged users not to click suspicious or unverified links and not to share their 24-word recovery phrase with anyone. The company also warned about messages that impersonate SecuX Support. In a service update, SecuX said the app had resumed normal operations and repeated that it will never ask for the recovery phrase.
Schwartz’s warning points to a simple rule: recovery phrases should stay offline and private. If a notification pressures you to verify a wallet through a link, treat it with suspicion. Check the official app or site directly instead of using the link. And never type seed words into a page reached from an alert, even if the alert looks like it came from a known wallet provider.
The post Ripple CTO Emeritus Warns of SecuX Wallet Notification Scam appeared first on TheCryptoUpdates .
