Spot Wallet Phishing Attempts
Inspect links, domains, permissions, and transaction details before you trust a prompt.
Phishing pages often copy familiar wallet layouts and claim urgent support, upgrades, or rewards. Judge the request by its origin and behavior—not simply by the visual design.
Recognize the risk and verify the details
Read the full domain, including subdomains, spelling, and redirects.
↗Reject websites that ask for an entire recovery phrase or exported key.
↗When connecting to Web3 sites, inspect approvals, spending limits, and signed messages.
↗Pause when a message creates urgency and verify through an independent channel.
↗Key principle
Fake rewards, freezes, and security alerts can be used to pressure decisions. Treat unfamiliar links as untrusted until checked.
When should you pause?
Fake rewards, freezes, and security alerts can be used to pressure decisions. Treat unfamiliar links as untrusted until checked.
Treat unexpected requests for private keys or recovery words as high risk. If authorization or transfer details are unclear, pause and verify independently before continuing.
Three checks before proceeding
- Source and domain are understandable
- Recovery phrase was not shared
- Approval scope matches your intent
A clearer start to wallet security
Check the source, back up your recovery phrase, and review every transaction before signing.
⬇ Download NowDownload instructions and safety guidance are available on this site.