What to know first
Fake downloads, malicious approval prompts and impersonated support can lead to loss. Learn practical signs to spot and review.
Never share private keys or recovery phrases. This page provides general guidance; verify capabilities in the actual software you use.
A practical review sequence
Verify the domain rather than trusting search ads
Pause and confirm this point independently. Keep a record of relevant non-secret settings and stop whenever the source or request cannot be verified.
Avoid connecting to unknown dApps
Do not treat a warning as a routine click-through. Understand the effect of the operation before continuing.
Be cautious of unlimited allowances and unfamiliar signatures
Review network context and avoid sharing sensitive credentials even with someone claiming to provide support.
Stop if anyone asks for your recovery phrase
Finish with a final check and keep the recovery plan available offline.
Common mistakes and next steps
Avoid deciding based only on token names, page appearance or links received in messages. When in doubt, stop and verify with a known trusted source.