# How to tell if a crypto wallet screenshot is fake: five checks and one that settles it

Source: https://mylarpwallet.com/blog/spot-a-fake-crypto-wallet-screenshot
Updated: 2026-11-01
Published: 2026-09-21
Topic: Crypto wallet mockups (https://mylarpwallet.com/blog/crypto-wallets)

> How to tell if a crypto wallet screenshot is fake: totals that do not add up, a clock that contradicts the story, and the one on-chain check that settles it.

A composed wallet screen is quick to make and quick to check. The tells are arithmetic, timestamps and rounding, and none of them settle whether a number is real.

**Short answer:** A screenshot can never prove a crypto payment or a balance, because anyone can compose one in minutes. The check that settles it is on-chain: ask for the transaction hash or the public address and look it up on a block explorer. Before that, three quick tells: totals that do not equal the sum of the rows, a status bar clock that contradicts the time on the screen, and rounding that is too clean.

## Start with the arithmetic

Most guidance on how to spot a fake crypto wallet screenshot starts with the pixels. Start with the numbers. Add the rows: the total at the top of a wallet screen is the sum of the holdings below it, and in a composed screen it often is not, because the total is a field someone typed. We build a wallet screen simulator, so we know that failure from the inside: our balance and daily change are computed for you, and both can be overridden by hand. That override is the most common reason a composed screen fails the first check.

Then take the rows one at a time. Quantity times the token's price at the stated moment should equal the row's fiat value. Off by a cent is rounding. Off by ten percent is not.

## Percentages have to agree with the market

A day's move is public. If a token closed down four percent, a row showing it up that day is a claim anyone can check against price history. The portfolio percentage is stricter: it is a weighted average of the rows, so it lands on an ugly number. A total up exactly 5.0 percent over rows at plus 12, plus 3 and minus 1 is a coincidence worth doubting.

## The parts nobody remembers to change

- **The clock.** 9:41 is the time on the phone in the manufacturer's own marketing images. It survives into composed screens because it is not the part anyone is thinking about.
- **The battery.** Full, or identical across images supposedly taken hours apart.
- **A set that does not move.** Two screens sent an hour apart, prices identical to the cent, describe a market that stopped.

## Rounding tells you who typed it

Real balances are ugly. They carry the remainder of a swap, the dust left after a fee, eight decimals nobody chose. Typed balances round: 10.00000, 2.5, a total sitting near a memorable number. One clean quantity means nothing. Four in a column means a person picked them.

## The interface has a version

Wallet apps change layout between releases, so a screen said to be from this week in a layout that shipped two versions ago is an old image or a rebuilt one. Compare it against a current install, not against memory.

## The five tells at a glance

| Tell | Why it fails | How to check |
|---|---|---|
| A total that is not the sum of the rows | In a composed screen the total is a field someone typed | Add the rows, then multiply each quantity by the token's price at the stated time |
| A percentage the market contradicts | The day's move is public, and the portfolio change is a weighted average | Compare each row with that day's price history |
| A clock or battery that contradicts the story | Nobody edits the status bar | Compare it with the time the message arrived and with the other images in the set |
| Rounding that is too clean | Real balances carry dust and long decimals | Read the quantities as a column |
| A layout from another version | Apps change between releases | Open the current app next to the image |

These are tells, not proof. A careful composition passes all five.

## Reverse image search and metadata

A reverse image search, such as Google Lens, finds pages that host the same or a similar image. It helps when someone reposts a screenshot taken from another person's account. It is useless on a new composition, which has no earlier copy to find, and it never tells you whether the numbers are true. Metadata is no better. An image file can carry a creation time or a device name, but anyone can edit or remove it, so its presence proves nothing and its absence proves nothing. A date that contradicts the story is one more tell, no more.

## If someone is asking you to pay or ship because of a screenshot

Treat the image as a claim, not a receipt. Do not send goods, money or access because of a screenshot of a payment, a balance or a transaction. A payment exists when it shows up in your own account or wallet, or when you look the transaction up yourself on a block explorer. Pressure to act before you can check, such as "ship now and I will send proof", is a tell of its own. The FTC warns that only scammers demand payment in cryptocurrency and only scammers guarantee profits or big returns. If you were targeted, report it to the platform and at ReportFraud.ftc.gov. This is general information, not legal advice.

## The only check that settles it

Everything above catches mistakes. None of it proves anything, because a careful composition passes all of it. A screenshot of ours would, at whatever resolution the phone produces, with the phone's own clock in its status bar. An image is not evidence of a balance and cannot be turned into one.

What settles it is a public address and a block explorer. The chain reports what that address holds, independently of anyone's screen. To tie the address to a person, ask for a signed message: they sign a phrase you choose, you verify it against the address. Address, explorer, signature. If someone offers a screenshot instead of an address, that is the answer.

Look it up yourself. Paste the address or the transaction hash into a block explorer, such as Solscan for Solana or Etherscan for Ethereum, and compare the status, the time, the sender, the recipient and the amount with what you were told. A hash proves nothing until you have verified it on an explorer: pasted into a chat, it is only text. My Larp Wallet is not affiliated with Solscan, Etherscan or Google.

## Other fake screens you may meet

The same rule covers the images people share to look successful: [what a crypto PnL card shows and hides](https://mylarpwallet.com/blog/crypto-pnl-card), [prank apps that draw a fortune](https://mylarpwallet.com/blog/crypto-prank-apps), and the line between a prop and a scam in [fake crypto wallet apps](https://mylarpwallet.com/blog/fake-crypto-wallet-app). For a class, [teaching crypto wallets and scam awareness](https://mylarpwallet.com/blog/crypto-wallet-lesson-plan) turns these checks into a lesson. If you need to share a real screenshot, [how to redact a crypto wallet screenshot or video](https://mylarpwallet.com/blog/redact-crypto-screenshot) covers what to cover.

## Sources

- [ethereum.org, Block explorers](https://ethereum.org/en/developers/docs/data-and-analytics/block-explorers/), read 2026
- [Solscan, What is a block explorer?](https://info.solscan.io/what-is-a-block-explorer-2), read 2026
- [Google Search Help, Search with an image](https://support.google.com/websearch/answer/1325808?hl=en), read 2026
- [FTC Consumer Advice, What to know about cryptocurrency and scams](https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-and-scams), read 2026

## Questions

### What is the fastest check on a wallet screenshot?

Add the rows and compare with the total at the top. In a real app the total is computed from the holdings, so it always agrees. In a composed screen the total is a field someone typed, and it is the first thing to drift. The second check is per row: quantity times the token's price at the stated time should equal the row's fiat value.

### Why does the status bar give a screenshot away?

Because nobody edits it. 9:41 is the time on the phone in the manufacturer's own marketing images, and it survives into composed screens for the same reason: it is not the part anyone is thinking about. A battery frozen full does the same. Across a set it is worse: several images supposedly taken hours apart, all showing the same minute and the same prices to the cent, describe a market and a phone that both stopped.

### What does a block explorer actually prove?

That a given address held a given balance at a given block. It says nothing about who controls the address, so an address alone can be copied from anywhere. Connecting the two takes a signed message: the holder signs a phrase you choose with the private key, and you verify the signature against the address. Address, explorer, signature: no image is part of it.

### Can software detect a fake crypto screenshot?

Image-forensics tools look for signs that a photo was edited, and a wallet screen drawn from scratch has none, so they are the wrong instrument here. The checks that work are the arithmetic of the rows and the total, the market history for the day, and, above all, the chain: a public address or transaction hash looked up on a block explorer.

### Is a transaction screenshot proof of payment?

No. A screenshot is a picture anyone can compose or edit in minutes. A payment is proven when it appears in your own account or wallet, or when you look up the transaction hash on a block explorer and the status, time, sender, recipient and amount match what you were told.

### Is it legal to make a mockup wallet screenshot?

Making one as a labeled prop for a video, a deck or a lesson is ordinary, and the image itself is not an offense. Showing it to someone as your real balance, or as proof of a payment, to obtain money, goods or trust is where fraud starts. This is general information, not legal advice; [is a larp wallet legal](https://mylarpwallet.com/blog/is-larp-wallet-legal) goes through the country-by-country picture.