Staying safe
Is that Kroll email about your Terraform claim legit?
Kroll Restructuring Administration is the real claims administrator in the Terraform Labs bankruptcy, so an email from Kroll about your claim can be genuine. Scammers copy those emails, though. The safe test takes a minute: do not act on the email, open claims.terra.money yourself, and check whether the same notice is in your account.
This guide covers the emails Kroll really sends in this case, the red flags of a fake, five quick checks, and how TerraClaim verifies the Kroll emails sellers forward, using DKIM signatures, so that a claim number cannot be faked.
Facts checked
The emails Kroll really sends about Terraform claims
Two kinds of Kroll email matter most for your claim.
- Notification of Initial Determination. It tells you whether your claim is allowed and for what amount. The first tranche of 1,299 went out in August 2025, and the rest follow in rolling 30-day cycles. What the notice says.
- Requests for additional information. 5,285 claimants were asked for additional information. How to answer one.
Both concern a claim you filed yourself. An email about a claim you never filed, or a payout you never applied for, is a warning sign on its own.
Red flags of a fake
| A fake email often | Why it gives itself away |
|---|---|
| Asks for a fee to process, release or speed up your claim | Real notices do not ask you to pay |
| Asks for a seed phrase, private key or wallet connection | No claims process needs your keys |
| Asks for your portal password or a login code | Nobody legitimate needs it, and TerraClaim never asks for it |
| Links to an address other than claims.terra.money or Kroll's own site | Lookalike sites copy the real pages |
| Says your distribution is ready and you must act today | No date has been announced for distributions |
| Shows a familiar sender name over an unfamiliar address | Display names are easy to fake |
Five checks that take a minute
- Do not click anything yet. No links, no attachments, no reply.
- Read the full sender address, not just the name. It is a first filter, not proof, because addresses can be spoofed.
- Check where links lead. Hover over a link on a computer, or press and hold on a phone, and read the real address. It should be claims.terra.money or Kroll's own site.
- Log in yourself. Type claims.terra.money into your browser and check whether the same notice, amount and status are in your account. The portal guide helps if you cannot log in.
- Ask Kroll if in doubt. Use the contact details on the Terraform case page, never a phone number or link from the email you are checking.
How TerraClaim verifies a forwarded Kroll email
When you sell through TerraClaim, you forward your Notification of Initial Determination during onboarding. Many email services sign every message they send with DKIM (DomainKeys Identified Mail): a cryptographic signature made with the sending domain's private key. Anyone can check it against the public key that the domain publishes in its DNS. If the signature is valid, the email came from that domain and its signed content was not changed on the way.
TerraClaim checks that signature on your forwarded email. Your claim number therefore comes from Kroll itself, not from a typed form or an edited screenshot, and it is then checked against the official Kroll register. Edits to the signed parts break the signature, so forward the original message rather than copying its text into a new email. The other checks in a sale are listed under security and verification.
If you already clicked or shared something
Act quickly. What to do depends on what you gave away.
- You entered your portal password on another site. Change it on claims.terra.money if you can, and tell Kroll.
- You shared a seed phrase or connected a wallet. Move whatever is left to a new wallet with a new seed phrase right away.
- You paid a fee. Contact your bank or exchange at once, and report it to the police where you live.
- You shared your CLC form or claim number. Be extra careful with any email that follows. On TerraClaim, a sale also needs a confirmation from your claim's email address, an identity check and a video call on which you log in yourself.
Is selling a Terra claim safe shows what a safe sale looks like from start to finish.