Recognizing Phishing and Staying Secure

Most account compromises don't come from a technical exploit — they come from someone being tricked into handing over access. Recognizing the pattern is most of the defense.

Common tactics to watch for:

- Urgency. Messages claiming your account will be suspended, frozen, or closed "unless you act now" are designed to make you skip your normal caution.
- Lookalike links. A domain that's one character off from the real one, or a link with a legitimate-looking display text hiding a different destination — always check the actual URL before entering credentials.
- Requests for your seed phrase or private key. No legitimate platform, including this one, will ever ask you for your wallet's recovery phrase or private key. Anyone who does is attempting theft, full stop.
- Unsolicited "support" contact. Scammers often pose as support staff in chat, email, or social media, reaching out first rather than responding to a request you made.

Habits that meaningfully reduce risk:

1. Enable two-factor authentication (an authenticator app or a passkey) on every account that supports it.
2. Bookmark the real login page rather than clicking links from email or messages.
3. Treat any request for your recovery phrase as an automatic red flag, regardless of who appears to be asking.
4. Keep your device's operating system and browser up to date — many attacks rely on known, already-patched vulnerabilities.

Security is mostly about consistent habits, not any single tool.

Recognizing Phishing and Staying Secure

Your Financial Future Starts Here.