Phishing
Also called: phishing scam · phishing attack · wallet drainer
Definition
Phishing is a scam where attackers impersonate a trusted exchange, wallet or person to trick you into revealing login details or a seed phrase, or into signing a transaction that hands over your funds.
This entry is shown in English.
How Phishing works
Crypto phishing comes through fake websites with near-identical domains, search ads, emails, SMS, social media replies, fake support accounts and direct messages offering airdrops. The goal is either to collect what you type, such as passwords, 2FA codes or seed phrases, or to get you to connect a wallet and sign a malicious approval.
Signs to check: an urgent deadline, a request for your seed phrase, a domain that is slightly different, a support agent who contacts you first, or a wallet pop-up asking to approve unlimited spending or sign a message you do not understand.
Practical defences are simple. Bookmark official sites, open the app directly rather than clicking links, set an anti-phishing code, use a withdrawal whitelist, and read every wallet request before signing.
Example
Imagine you search for your wallet's website and click the first result, which is an ad. The page asks you to enter your 12-word phrase to fix a sync error. A real wallet would never ask for this. Had you entered it, a wallet holding 3,000 USDC and 0.6 ETH would be emptied within minutes. Instead, you close the tab and open the bookmarked official site, which shows no error at all.
Common mistakes
- Trusting a link because it appeared at the top of search results or in a verified-looking account.
- Replying to a support agent who messaged you first on Telegram, Discord or X.
- Signing a wallet request to claim a free airdrop without reading what it approves.
Learn and practise
FAQ
What should I do if I clicked a phishing link?
If you only opened the page, close it. If you entered a password or code, change your password and check your account; if you entered a seed phrase or signed an approval, move remaining funds to a new wallet and revoke approvals.
How can I tell if a crypto site is fake?
Check the exact domain spelling, use bookmarks, and be suspicious of any page that asks for your seed phrase or creates urgency.