How to Avoid Phishing

Phishing is the #1 cause of crypto theft: fake sites, fake support, malicious signatures. A few habits block most of it.

What Phishing Looks Like

Common tactics: lookalike exchange/wallet sites (a domain off by one letter), fake "verify your account" emails/texts, fake official sites in search ads, social-media "support" DMing you first, and getting you to "sign" on a site to steal an approval. All rely on urgency and a false sense of trust.

Actionable Defenses

  1. Bookmark official sites and always enter via the bookmark — never email/ad links. 2) Verify every letter of the domain by hand. 3) Anyone asking for your seed/private key is a scammer. 4) Before signing, understand exactly what you sign and what you approve. 5) Use a hardware wallet for size and enable withdrawal whitelists. 6) Real "support" never DMs you first.