How to recognise wallet phishing

Urgency, a convincing link and a request for access are common ingredients in scams.

Look beyond the familiar branding

A recognisable logo does not verify the sender. Messages threatening to block a wallet or promising a reward may try to persuade you to reveal a backup or sign a transaction. A hardware wallet cannot decide whether a website deserves your trust.

Check the destination independently

Do not use the message's own link to verify its claims. Open an official address you previously saved or find the manufacturer's documentation through an independent channel. Check the entire domain. HTTPS secures a connection; it does not prove that a website is legitimate.

Stop at requests for secrets

Do not send a seed phrase or private key through chat, email or a form. Account verification and blockchain synchronisation do not justify disclosure. For genuine recovery, follow the official instructions for your device.

Read before you sign

A contract approval can have financial consequences. Decline actions you do not understand and check what access you are granting. Do not connect a funded wallet merely to explore an unfamiliar website.

If you have already interacted

Close the page and preserve incident details without exposing secrets. If your backup was disclosed, treat it as compromised. If you approved a contract, check official guidance on the permissions you granted and how to revoke them. Revocation does not recover funds already transferred. Avoid promises of guaranteed recovery in exchange for an advance payment or your backup.