Phishing Scam

Phishing is the oldest trick on the internet, dressed up for crypto. A message arrives that looks like it is from your exchange, wallet, or a support team. It creates urgency, sends you to a page that looks identical to the real one, and asks you to log in, verify, or “secure” your account. Every detail you type goes straight to the attacker.

How it works

You get an email, DM, or SMS: “Your wallet is compromised, log in now.” The link points to a domain that is a letter or two off from the real one. The site looks right. You enter your credentials, your 2FA code, or worse, your seed phrase. Within minutes, your accounts are drained.

Red flags

• Urgent language and threats that your account will be locked or emptied.
• Slightly misspelled URLs like “coinbase–support.com” instead of the real domain.
• Any request for your seed phrase or private keys. No real company ever asks.
• Links delivered by DM, email, or text rather than through the app itself.

How to protect yourself

Never click links in unexpected messages. Type the official URL yourself or use a saved bookmark. Turn on two factor authentication with an authenticator app, not text messages. Slow down and read the domain carefully every single time.