Wallet-stealing is malicious code designed to capture the data needed to open or control a cryptocurrency wallet. That can include seed phrases, private keys, browser-stored credentials, session tokens, or anything typed into a wallet interface. Once stolen, that information lets an attacker sign transactions and move funds without needing to break cryptography directly.
It matters because crypto wallets are often protected only by secrecy of the access material. Wallet-stealing commonly appears in browser extensions, fake wallet pop-ups, phishing pages, and malware that watches the clipboard or form fields. Defenders reduce risk by using hardware wallets, limiting extension permissions, inspecting installed add-ons, and treating any request for recovery phrases as suspicious. In practice, wallet-stealing is often the first step before crypto-draining: theft of access data enables the transfer of assets from the victim’s wallet.