Keep your GST where it belongs

The STEPN wallet is the first thing you create in the app and the last thing most players think about, until something goes wrong. It holds your GST, GMT, sneakers and gas coins, and it is self-custody: you get a 12-word secret phrase when you create it ^[source] . Whoever has those twelve words controls everything inside. That is the core of GST wallet security, and almost every scam targeting STEPN players is an attempt to get those words, your login codes or your 2FA.

This page explains how the in-app wallet is structured, what Spending and Wallet mean, how 2FA protects you, how external wallets like Phantom, Trust Wallet and MetaMask fit in, how to spot fake GST tokens, and what to do if you think you have been compromised. The safety checklist at the top of the page lets you score your own setup in a minute.

How the STEPN wallet works

When you set up STEPN, the app creates a wallet for you and shows you the 12-word phrase. Write it down on paper, store it somewhere safe, and never type it into a website, chat or form. The phrase is the master key. If you lose your phone, you restore the wallet with it. If someone else gets it, they can restore your wallet on their phone and empty it.

The whitepaper does not call the wallet “non-custodial”, but that is how it behaves: FSL does not hold your keys and cannot reset your phrase. Only one wallet can be linked to a STEPN account. If you try to add a second, you see a “Wallet already exists” error ^[source] .

The wallet holds tokens for each realm you use. You fund it with the realm’s gas coin (SOL, BNB or POL) and with GMT for marketplace purchases. Our STEPN starter guide covers first-time funding.

Spending account vs Wallet

STEPN splits your assets into two places, and confusing them causes many support tickets.

The Spending account is your in-game inventory. Sneakers you play with, GST you earn, and gems you use all live there. Anything you spend in the game, such as GST on leveling or repairs, is burned from Spending.

The Wallet is your on-chain wallet, the one tied to the 12-word phrase. It is where you hold tokens you are not using right now, swap tokens, and send them out of STEPN.

Moving assets between the two is an on-chain transaction and costs gas in the realm’s coin ^[source] . There is also a game rule to remember: moving a sneaker from Spending to Wallet reduces Energy and purges every Mystery Box in that realm. Unopened boxes are gone. Think twice before moving a sneaker just to “store it safely”.

Why 2FA matters, and why to set it up today

STEPN integrates Google Authenticator for two-factor authentication. The whitepaper warns that resetting 2FA could take months ^[source] . That cuts both ways. It makes life hard for an attacker who has your email password but not your authenticator. It also makes life hard for you if you lose your phone and have no backup.

So set it up, and back up the authenticator secret when you do. If your authenticator app supports encrypted cloud backup or export, use it. If not, store the setup key offline with your seed phrase, separately from your phone. Never share a 2FA code with anyone, for any reason. A real support agent does not need it.

Using Phantom, Trust Wallet or MetaMask with GST

You do not have to keep your GST inside the STEPN wallet. Because each realm’s GST is a standard token, external wallets can hold it:

• sGST is an SPL token on Solana, so Solana wallets such as Phantom can hold it.
• bGST is a BEP-20 token on BNB Chain, so EVM wallets such as Trust Wallet or MetaMask (set to BNB Chain) can hold it.
• pGST is an ERC-20 token on Polygon, so the same EVM wallets set to Polygon can hold it.

This works at the token-standard level. We could not find an official “supported external wallets” list from FSL, so do not assume STEPN endorses any particular app. What it does list officially are external NFT venues for sneakers: Magic Eden and OpenSea, and Binance NFT for the ASICS collection.

If GST does not appear in an external wallet, you may need to add it manually by contract address. That is exactly the moment scammers count on, because a search for “GST” in a wallet or DEX returns many fakes. Copy the address from the official source, not from a search result.

The explorer above shows the official contract for each realm, taken from the STEPN whitepaper tokenomics page ^[source] . The Ethereum GST contract is inactive since the Polygon realm replaced the Ethereum realm, so do not add or buy it. For the bigger picture on why the three tokens differ, see our guide to GST on Solana, BNB Chain and Polygon.

Fake GST tokens and how to avoid them

There are many unrelated tokens using GST as a ticker, from stock-themed tokens to memecoins paired with GST on DEXs. Some are innocent name clashes; others are created to catch people who search by name. A fake token can have the right logo, the right name and even a price chart. The only thing it cannot copy is the contract address.

Before you buy, add or accept any GST, compare its address character by character with the official one. If you receive a GST token you did not expect, especially with a message telling you to visit a site to “claim” or “redeem” it, ignore it. Interacting with unknown tokens and the sites they point to is a common way wallets get drained. When you actually need to buy GST, follow our how to buy GST guide, which uses the in-app swap or official contracts.

The most common STEPN scams

STEPN’s own Help Center keeps a page on scammers and hackers ^[source] . The patterns repeat:

The thread through all of them is simple. Official STEPN moderators never DM users, never ask for tokens and never ask for codes. If someone contacts you first, the default answer is no. Find help yourself through the official links page on the Help Center ^[source] , and only install the app from official app stores.

What to do if your wallet is compromised

If you think someone has your seed phrase, or you see transactions you did not make, act fast and in this order.

First, from a clean device, create a new wallet with a new seed phrase and move whatever is left to it. Do not reuse the old phrase anywhere. If the attacker still has it, they can drain anything you send back to the old address. If the device you used might be infected, do not create the new wallet on it.

Second, secure your STEPN account: change the email password, make sure 2FA is on and under your control, and check that the account email is still yours. Account takeover by email swap is one of the listed scam patterns.

Third, contact STEPN support only through the official links. Expect that on-chain transfers cannot be reversed. Support can help with account access, but nobody can pull tokens back from an attacker’s wallet. Be wary of “recovery services” that contact you after you post about a hack in public; they are a second wave of scammers.

Fourth, write down what happened: dates, transaction hashes, addresses. It helps support and, in some countries, a police report.

In-app wallet or external wallet: which should hold your GST?

There is no single right answer, but the trade-offs are clear. The in-app wallet is where the game happens. GST used for leveling, repairs or minting has to be in your Spending account anyway, and the in-app swap already knows the correct GST contract for your realm. Keeping working balances there saves gas and avoids address mistakes.

An external wallet makes sense for amounts you are not using in the game. It separates your long-term holdings from the phone you carry on every run, and it lets you use DEXs directly. The cost is one more seed phrase to protect and one more place where you must check contracts and networks by hand.

A simple pattern many players use: keep what you need for the next few days of play in STEPN, and move the rest to a separate wallet you rarely touch. Whatever you choose, remember that GST is an uncapped utility token, as our tokenomics page explains, so a wallet full of idle GST is a choice, not a default. Check its value on the live GST price page before deciding where it should live, and if you trade from Asia, the Asia hub covers local exchanges and rules.

Habits that keep your GST safe

Good security is mostly boring habits. Keep the seed phrase offline and private. Turn on 2FA and back it up. Keep a small amount of gas coin in the wallet so you are never pressured into a hurried transfer. Before every send, check the coin, the network and the address. Send a test first when the amount matters. And treat every unsolicited message, link or token as hostile until proven otherwise.

Network mistakes are not scams, but they lose money just as well. Sending pGST to a Solana address, or bGST to an exchange that only accepts Solana GST, can mean the tokens never arrive. Our selling guide walks through matching networks when cashing out, and our marketplace playbook covers buying sneakers safely.

Keep in mind that the anti-cheat system also affects your wallet. Withdrawals are blocked if your Turing score falls to 80 or below, and using several devices can get your account flagged. Playing honestly on one phone protects your access as well as your reputation in the game.