Is this crypto wallet screenshot fake? Read the numbers, then ask the chain
Drawing a convincing wallet screen takes minutes, and checking one takes about as long. Sums, clocks and decimals will expose a careless fake. Only the blockchain can back up a real one.
Published: · Last reviewed:
A screenshot is a claim, not a receipt
Someone sends you a wallet image. Maybe they say they paid you, maybe they say they hold a large amount, maybe they want you to ship something. Whatever the story, hold on to one idea: the picture asserts something, and an assertion needs backing from outside the picture. The sections below go from the quickest sanity checks to the only one that carries weight.
We build a wallet screen simulator, so we know how these images get made. In our tool the balance and the daily change are worked out for you, and both can be overridden by hand. That override is exactly how a fake ends up with numbers that disagree with themselves.
Layer one: do the numbers agree with each other?
Add up the rows and compare with the headline total. A real app derives the total from the holdings, so it always matches. A composed screen often carries a total someone typed in.
Next, one row at a time: quantity multiplied by the token's price at the stated moment should give the fiat value on the row. A cent off is rounding. Ten percent off is not.
Percentages deserve the same suspicion. A day's move is public, so a token that closed down four percent cannot honestly be shown as up that day. The portfolio percentage is a weighted average of the rows and usually lands on an awkward figure. If rows read plus 12, plus 3 and minus 1 and the total claims exactly plus 5.0 percent, that tidy result is worth doubting.
Layer two: the details no one remembers to edit
- Clock. 9:41 is the time on phones in the manufacturer's own marketing pictures. It survives into composed screens because the clock is not what the author is thinking about. Compare the time to when the message actually arrived.
- Battery. Full in every image, or unchanged across shots said to be hours apart.
- A frozen market. Two screens sent an hour apart with prices identical to the cent describe a market that stopped.
- App version. Wallet apps change layout between releases. A screen said to be from this week but laid out like an old release is either an old image or a rebuilt one. Open the current app next to it instead of trusting memory.
Layer three: decimals that look chosen
Real balances are untidy. They carry what is left after a swap, dust after a fee, eight decimals nobody picked. Typed balances round off: 10.00000, 2.5, a total close to a memorable number. One clean quantity means nothing. Four in the same column suggest a person chose them.
The five tells in one table
| What you see | Why it points to a fake | How to test it |
|---|---|---|
| Total differs from the sum of the rows | In a composed screen the total may be a typed field | Add the rows, then multiply each quantity by that moment's price |
| A percentage the market contradicts | Daily moves are public and the portfolio change is a weighted average | Match each row to that day's price history |
| Clock or battery at odds with the story | The status bar is rarely touched | Compare with the message time and the other images |
| Balances rounded too cleanly | Real holdings carry dust and long decimals | Read the quantities down the column |
| Layout from a different release | Interfaces change between versions | Put the current app beside the image |
These are tells, not proof. A careful composition passes all five.
Reverse image search and file metadata
A reverse image search, such as Google Lens, finds pages hosting the same or a similar image. That helps when someone reposts a screenshot lifted from another person's account. It does nothing for a fresh composition, which has no earlier copy, and it never says whether the numbers are true. Metadata fares no better: a file can hold a creation time or a device name, yet anyone can edit or strip them, so finding them proves nothing and not finding them proves nothing. A date that clashes with the story is simply one more tell.
The check that decides it: ask the chain
Everything above catches slips. None of it proves anything, because a careful composition passes the lot. Ours would, at whatever resolution a phone produces, with the phone's own clock in the status bar. An image is not evidence of a balance and cannot be turned into one.
What settles it is a public address and a block explorer. The chain reports what the address holds, independent of any screen. To connect the address to a person, request a signed message: they sign a phrase you pick, and you verify the signature against the address. Address, explorer, signature. If the answer to your request is a screenshot in place of an address, you have your answer.
Do the lookup yourself. Paste the address or the transaction hash into a block explorer, such as Solscan for Solana or Etherscan for Ethereum, and compare status, time, sender, recipient and amount with what you were told. A hash proves nothing until you have verified it on an explorer; dropped into a chat, it is only text. Flexdger Wallet is not affiliated with Solscan, Etherscan or Google.
When a screenshot is the reason you are asked to pay or ship
Treat it as a claim and hold the goods. Do not send money, items or access because of an image of a payment, a balance or a transaction. A payment exists when it appears in your own account or wallet, or when you find the transaction yourself on a block explorer. Pressure to move before you can check, for example "ship now and I will send proof", is a tell of its own. The FTC warns that only scammers demand payment in cryptocurrency and only scammers guarantee profits or big returns. If you were targeted, report it to the platform and at ReportFraud.ftc.gov. Read this as background, not legal advice.
Related reading
The same rule covers images shared to look successful: what a crypto PnL card shows and hides, prank apps that draw a fortune, and the border between prop and scam in fake crypto wallet apps. Running a class? teaching crypto wallets and scam awareness turns these checks into a lesson. To share a genuine screenshot, how to redact a crypto wallet screenshot or video shows what to cover.
Sources
- ethereum.org, Block explorers, read 2026
- Solscan, What is a block explorer?, read 2026
- Google Search Help, Search with an image, read 2026
- FTC Consumer Advice, What to know about cryptocurrency and scams, read 2026
Questions
Where should I look first?
At the sum. In a genuine wallet the headline total is calculated from the holdings underneath, so the two always agree. In a composed screen the total is often a typed field and drifts. Then take each row: quantity times the token's price at the stated moment should equal the fiat value shown.
Why is the status bar such a good giveaway?
Because it is the part nobody thinks to edit. 9:41 is the time shown on phones in the manufacturer's own marketing pictures, and it lingers in composed screens for that reason. A battery stuck on full does the same. Across several images, identical minutes and prices matching to the cent suggest a clock and a market that both froze.
What does a block explorer tell me, exactly?
It tells you which balance an address held at which block. It does not tell you who controls that address, and anyone can paste an address they found elsewhere. To tie the two, ask the person to sign a phrase of your choosing with the private key and check the signature against the address. No image is involved at any step.
Can a program flag a fake wallet screenshot?
Forensics tools hunt for traces of photo editing. A wallet screen drawn from nothing leaves none, so they are the wrong instrument. What works is checking the rows against the total, comparing against that day's market history, and above all searching the chain for the address or hash.
Does a transaction screenshot prove I was paid?
No. It is a picture that anyone can compose or alter. A payment is proven when it shows in your own account or wallet, or when you look up the hash on a block explorer and the status, time, sender, recipient and amount match what you were told.
Is it legal to create a mock wallet screenshot?
Making one as a labeled prop for a video, a deck or a lesson is ordinary, and the image is not an offense in itself. Showing it as your true balance or as proof of payment to obtain money, goods or trust is where fraud begins. This is general information, not legal advice; is a larp wallet legal covers the country-by-country picture.