Train against phishing, fake support, fake airdrops, rug pulls, malicious approvals, impersonation and wallet drainers.
Phishing uses fake websites, messages or emails to steal credentials, seed phrases or signatures.
Scammers often impersonate support staff and create urgency around account problems.
Airdrop scams promise free tokens but use a claim page to trick users into connecting a wallet or signing a malicious transaction.
A rug pull can involve malicious token mechanics, concentrated ownership, removal of liquidity, deceptive promises or other ways of extracting value from participants.
Malicious contracts or signatures can authorize transfers or otherwise cause assets to leave a wallet.
A token approval can grant a spender permission to transfer tokens. A malicious or compromised spender can create loss risk.
Attackers register lookalike domains, use sponsored ads or manipulate search results to impersonate real services.
Scammers copy logos, profile pictures, names and announcements to look official.
“Act now”, “account will be closed”, “wallet hacked”, and “limited claim” are common pressure tactics.
If you suspect a scam, stop signing, disconnect if appropriate, revoke risky approvals, secure accounts from a clean device and document transaction hashes.
Before moving money, connecting a wallet, trusting a claim or signing a transaction, slow down. Identify the exact asset, network, contract, source, permissions and risks.