Phishing and wallet drainers

Phishing tricks you into giving away credentials or approving malicious actions by pretending to be a trusted service. In crypto it often involves fake exchange login pages, look-alike wallet apps, fake support agents on Telegram or X, sponsored search ads for counterfeit sites and emails about "suspicious activity".

"Wallet drainers" are malicious websites that ask you to connect your wallet and sign a transaction or message. The signature can grant unlimited permission to move your tokens. Once signed, funds can be taken in seconds, and blockchain transactions cannot be reversed.

Protect yourself: type addresses yourself or use bookmarks, never share your seed phrase, read what you sign, revoke unused token approvals, use a hardware wallet for savings, and treat any urgent or too-good-to-be-true message as a scam.