Phishing: the #1 way people lose crypto

Most crypto losses aren’t “hacks”. They’re consent — you were tricked into typing, signing, or approving something.

What phishing looks like

• A fake support account in DMs asking you to “verify” your wallet.
• A lookalike domain (one letter off) that mimics a wallet or exchange login.
• A pop-up that says you must “reconnect” and then requests a malicious signature.
• Airdrop bait that leads to a malicious site asking for approvals.

Your defense is a ritual

• Never click links from DMs. Go to the site manually via bookmark.
• Verify the domain. Slow down. Check spelling. Check HTTPS. Check you are on the exact site.
• Assume urgency is manipulation. “Your account will be locked” is a classic pressure tactic.
• Read what you sign. If you don’t understand it, do not sign it.

Rule: Support will never need your seed phrase. Any request for it is 100% a scam.