Protect recovery wordsVerify every addressUse a test transactionReview wallet approvalsSeparate activity from reservesIgnore unsolicited support
Pause before you sign

Crypto Wallet Scam Defense

Most wallet scams do not need to defeat cryptography. They persuade a person to reveal a secret, install a fake app, approve broad permissions, or send assets voluntarily. A deliberate verification routine interrupts that process.

Treat unsolicited support as hostile

Wallet support should not appear unexpectedly in direct messages, comment replies, or search ads. Scammers copy logos and create convincing profiles, then ask for recovery words, remote access, or a ‘validation’ transaction. Navigate to support through a known official site and assume that anyone requesting a seed phrase is attempting theft.

Verify the destination independently

A polished interface does not prove that a website or app is authentic. Check the exact domain, developer identity, publication history, and link source. Avoid relying on sponsored search results or links sent during an urgent conversation. Bookmark verified destinations and compare them character by character before connecting a wallet.

Understand the request

A signature can transfer funds, grant token permissions, list an item, authorize a smart contract, or simply prove address control. The words ‘sign in’ do not guarantee a harmless action. When the wallet shows an unlimited approval, an unfamiliar contract, an unexpected chain switch, or unreadable data, cancel and investigate from a separate trusted source.

Remove urgency from the process

Fraud relies on time pressure: an expiring claim, a frozen account, a support queue, or a threat that funds will disappear. Legitimate security review improves when you step away. Close the tab, take a screenshot that excludes secrets, and re-enter through your saved official link. A real service can tolerate independent verification.

Have an incident response path

If you disclosed a recovery phrase, treat the wallet as compromised rather than merely changing an app password. Use a clean device and verified software to move remaining assets to a newly generated wallet. If you signed a suspicious approval, review and revoke permissions where appropriate. Preserve transaction identifiers and communications for reports, but do not pay anyone who promises guaranteed recovery.

!
Use these principles as a framework.
Wallet features, network behavior, and service terms vary. Verify instructions for the exact product and network you use.

Continue in the Wallet Safety Journal