The essentials
Learn to inspect website addresses, app permissions, and signing prompts before trusting wallet requests.
01
Prepare
Pause when messages demand urgent upgrades, rewards, or account verification.
02
Review
Compare the full hostname carefully; short links and advertisements are not proof of legitimacy.
03
Verify
Inspect connection requests and signatures; reject permissions you do not understand.
04
Follow through
After a suspicious visit, review approvals and disconnect unknown sites without disclosing credentials.
A useful safety boundary
Protecting wallet credentials is a personal responsibility. No message, call, or website verification request justifies disclosing a private key or recovery phrase.