Key principles
Understand, then verify
Scams often use urgent messages, lookalike domains and fake support. Verify the source and understand every permission you grant.
Inspect domains
Watch for lookalike spelling, extra suffixes and sponsored results.
Never disclose phrases
Do not type your recovery phrase into an unsolicited form or send it to support.
Pause risky approvals
Investigate unexpected signatures and broad token approvals.
Never share a private key or recovery phrase. Pause on unfamiliar signing requests or websites.
