Nexus Entrance / Board index /Stopped at the door
Nexus addresses three doors, one platform behind them

Your account, balance and orders are the same through all three. Copy rather than retype, and check the signature once you are through.

Door A nexusb2l73qzjn4slhyfxa3jvpolw7fomiz5sgyyefnsdhikaqgborqd.onion
Door B nexusma2iegzo7atzwbrwxhcdopyri3vare2twibldnlc3txqjdeb5yd.onion
Door C nexusabcd6xxpjuftr7i3uohealsg64xtgwrmznkfh3o3rkcf3raxead.onion

An address that opens is not an address that is genuine. The check that settles it takes under a minute.

Asked for something odd

This is the shortest page here because the answer is categorical rather than a judgement call.

The absolute oneNothing legitimate ever asks for a wallet seed, in any framing, for any reason. Not to migrate, not to verify, not to recover, not to prove ownership. There is no exception and there is nothing to weigh up.

Requests that are never legitimate

The requestFraming you will see
Wallet seed or private keyMigration, verification, recovery, proving the wallet is yours
Password on a page you did not navigate toSession expired, confirm your identity, security check
Two factor code sent to somebodySupport needs it to unlock your account
Payment outside escrowFaster, cheaper, the escrow is having problems, a trusted regular arrangement
Personal identifying detailsAge check, address confirmation, dispute evidence
Lowering browser securityThe page will not work otherwise

Why urgency is always attached

Because checking defeats all of this, and the only way to prevent checking is to make you feel there is no time. That is why every one of these arrives with a deadline, a warning, or a consequence for delay.

Which gives a rule that needs no expertise. The presence of a clock is the answer. Nothing genuine in this space requires action within a stated period, because real changes run long overlaps precisely so that nobody has to hurry.

If you already answered

  1. If it was a password: change it immediately from an address you verified yourself, then reset two factor, then read the message log before checking anything else.
  2. If it was a two factor code: assume the session is compromised right now and go straight to changing the password and resetting the second factor.
  3. If it was a wallet seed: move whatever remains to a new wallet immediately. This one is measured in minutes and there is nothing else worth doing first.
  4. If it was payment outside escrow: there is no recovery mechanism. That is the whole reason escrow exists, and it is worth knowing now so it does not happen twice.

The ordering matters. People instinctively check the balance first, and the account is what somebody can act through right now, including talking to other people as you.

Afterwards

Work out where the thing that asked you came from, because that is the part that generalises. Almost always it arrived through a channel that cannot prove anything about itself, and almost always the reader believed it because of where they found it rather than because of anything it demonstrated. The key is the fix.