What happened
This bot calls itself Cloudflare Wallet. It is not from Cloudflare. Cloudflare's real Cloudflare Wallets, announced on August 4, 2026, is a product for AI agents inside a Cloudflare account. It has no Telegram bot, and it never asks anyone for a recovery phrase.
The operators work through channel owners, not through victims directly. They message the admins of large crypto channels, introduce themselves as Cloudflare's marketing team, and offer to pay for a post promoting the "new Cloudflare wallet". One post from a trusted channel would send thousands of people to this bot. Open it and it asks you to enter the recovery phrase of your existing wallet to connect it. The phrase is the wallet: whoever has it can move everything out, and that is what this bot is built to do.
We learned of it because the pitch reached the admin of a large crypto channel, who checked the bot instead of posting it and brought it to us. We checked it ourselves before listing it: it asks for a recovery phrase. Nothing was posted, and the accounts behind it were blocked.
How this scam works
You are sent to a link, a bot, or a file that asks for the one thing that unlocks your account or wallet: a login, a wallet connection, or a recovery phrase. It is dressed up as a real product, often riding real news, and the moment you hand that thing over, they own whatever it protects.
How to protect yourself
Never type a recovery phrase or private key into anything someone sent you. No real product, support agent, or partner needs it, ever. Reach sites and bots by typing the address yourself, and treat urgency as the tell.
Is this about you, and wrong? Message @IsScamRobot and send /appeal. A person will re-check the case, and listings that do not hold up are removed. One caution for everyone else: accounts get sold and usernames get recycled, so match the numeric id where shown before acting on this page.