WalletConnect is an open protocol that lets a mobile or hardware wallet talk to a decentralised app (dApp), usually via a QR code, without pasting private keys into the website. Used correctly it is infrastructure, not a bank. The official project points people to walletconnect.network and the wallets that implement the standard.
The risk is the costume around it. Fake “WalletConnect” apps in stores, phishing sites that harvest recovery phrases, and malicious session requests that ask you to sign a drain transaction all borrow the name. The protocol does not make a bad signature safe; you still have to read the chain ID, the contract and the amount.
Never type a seed into a WalletConnect page. Prefer wallets you installed from official stores, verify the dApp URL yourself, disconnect idle sessions, and reject blind signing. If a pop-up needs your twelve words to “sync WalletConnect”, close it.
If this pattern matches something you’ve been offered, start at Get help. If someone is already pitching “recovery”, read Fake recovery before you pay another fee.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.