Is Phantom safe? What its terms and incident record say
Is Phantom safe?
Phantom's terms disclaim custody but do not settle who holds key material. No one is disclosed as able to block an address, and the terms deny Phantom that power. No primary-source incident is recorded, which is not proof of none. Its terms name no gambling rule. Liability is capped at 100 US dollars.
Documents last checked Reviewed by CryptoGuardz Register Desk, editorial desk
Disclosure: CryptoGuardz has no commercial relationship with Phantom and earns nothing if you install it. Every statement below is read from a document Phantom publishes or from a public record, and each carries the date it was read. Corrections go to the corrections page.
Phantom review: the documents
This is a review of the documents Phantom publishes, not a test of the product: no transaction was signed and no code audit was read. The contracting party named is Phantom Technologies, Inc.; on jurisdiction the record says: Not stated in the terms. The custody position comes from the Phantom Terms of Use, last updated 17 March 2026, read 2026-09-22. The record quotes 10 clauses across 6 topics, and 7 sub-service clauses where the app hands a swap, purchase or staking to another party. Phantom's terms disclaim custody but do not settle who holds key material. A cloud or hosted backup is offered, and by the record it changes who holds key material. 2 clauses let the provider suspend or withdraw access to the app; the keys stay yours, the interface does not. Liability is capped at 100 US dollars. Its terms name no gambling rule. 6 points could not be verified and are listed below.
Has Phantom been hacked?
No primary-source incident was found for Phantom in this collection: no company disclosure, no public vulnerability register entry and no regulator action. That is not proof that none happened. It is the absence of a search result, and a forum post or a press report is not recorded here until a primary source confirms it.
Phantom support and scams
The official domain in the record is phantom.com. The help pages this register read include Phantom help centre, How your funds are stored and Phantom help centre, Create a wallet with Google or Apple. Type the domain yourself rather than following a link to it.
Real support never asks for a seed phrase. The recovery phrase restores the whole wallet on any device, so whoever is given it can move everything it controls, and no support agent needs it to answer a question. What Phantom stores, by the record: An encrypted copy of the wallet's Secret Recovery Phrase. Phantom encrypts the recovery phrase and splits the encryption key into two parts: one part held by Phantom, the other distributed across the Juicebox network. For these wallets the private key itself is held in a secure enclave under Phantom KMS rather than on the user's device, and the Show Private Key export option is disabled as a result. Seven incorrect PIN attempts delete the encrypted backup.
Support links reached from ads or direct messages are the commonest drain. A search ad, a reply to a public complaint or a direct message offers help, the link opens a page that looks like phantom.com, and the page asks you to “validate” or “sync” the wallet by entering the phrase. Once it is typed in, the wallet is emptied and nothing in the terms gives a way back.
If money has already gone, the next message offering to get it back is the commonest second loss. The FBI, the FTC, the CFTC and the UK FCA warnings about it are quoted on crypto scam recovery: what is real.
Phantom fees and limits
2 clauses in the record set a fee or a limit on what you can do through the app. They are quoted as written. Network fees paid to the chain are not part of the record.
You understand and acknowledge that to improve execution quality and/or user experience, Phantom has entered into arrangements with one or more third parties, including searchers and validators (collectively “Partners”), and Partners may share fees they earn from these arrangements with Phantom, including, but not limited to, fees from price movements, arbitrage opportunities, priority execution, improvements in price execution, the fulfillment of limit orders, and priority transaction processing.phantom.com
Some Partners may be provided the opportunity to have the exclusive right to, as applicable, bundle and submit the transactions you have entered into using the Functionality. You further understand and acknowledge that Phantom may enter into arrangements with one or more Market Makers allowing them to submit quotes to you with quoted prices via the Swapper interface. If you choose to execute your transaction with a Market Maker, you further acknowledge and understand that Phantom may receive a fee from the Market Maker with which you choose to execute your transaction.phantom.com
What we could not verify
The gaps in this record, as the record states them. A point listed here was looked for and not confirmed; it is neither a finding for Phantom nor against it.
- The default RPC or node provider for Phantom and what it can see. Neither the terms of use nor the privacy policy names an RPC or node provider, and the word RPC does not appear in either document. The privacy policy says IP addresses are passed to third party partners to establish a network connection but does not identify those partners.
- Whether Phantom offers a staking product and on what terms. The terms of use contain no staking clause. Staking was not confirmed against a primary Phantom source in this pass.
- Phantom's jurisdiction of incorporation. Not stated in the terms of use or privacy policy. British Virgin Islands references appear in sanctions and export-control clauses but are not incorporation statements, and were not tested against a company register.
- The named legal counterparty for Phantom Cash. The terms describe a suite of products enabling interaction between stablecoins and third party financial institutions but name no institution.
- Internal conflict left unresolved: Phantom's help centre states in one article that keys never leave the device and no one including Phantom can access funds, and in two other articles that for Google and Apple wallets Phantom holds one of two encryption key parts and the private key never leaves a Phantom-operated enclave. Both are Phantom primary sources. The conflict is recorded rather than resolved.
- Documented incidents. No primary-source Phantom incident was located in this pass. Absence of a record here is absence of a search result, not evidence of no incident.
Sources
- Phantom Terms of Use, last updated 17 March 2026
- Phantom Privacy Policy, last updated 7 July 2026
- Phantom help centre, How your funds are stored
- Phantom help centre, Create a wallet with Google or Apple
- Phantom help centre, View your recovery phrase or private keys in Phantom
- Phantom help centre, Buy tokens in Phantom
- Phantom help centre, Common issues when buying crypto in Phantom, listing on-ramp providers