A real wallet should never send your recovery phrase to a server. Anyone who has your phrase controls your funds.
Legitimate services never ask for your 12 or 24 words. If a site or person requests it, treat it as a scam.
Always double-check recipient addresses. Transactions are irreversible.