Start with the core principle
Learn to recognize lookalike domains, fake support accounts, malicious approval requests, and urgent phishing messages before they compromise your wallet.
Understand the risks and boundaries
Know what you are reviewing
Phishing often uses urgency, rewards, or fake support to obtain credentials. Stop and verify unfamiliar links and signature requests.
Verify the request and source
Do not skip independent checks because a website looks familiar, uses known asset names, or creates a sense of urgency.
Preserve a recovery path
Confirm a usable backup before sensitive actions, and avoid exposing credentials or granting unintended approvals.
A safer next step
If the network, address, app source, or signing details are unclear, pause and verify independently before proceeding.