Skip to content

Crypto Phishing

Crypto phishing tricks users into revealing seed phrases or signing malicious transactions through fake sites, adverts and support messages.

Crypto phishing is social engineering that tricks a user into handing over wallet access, usually by imitating a service the user already trusts. The classic form is a fake website, email or support chat that asks for a seed phrase or recovery words; no legitimate wallet or exchange ever needs them. Modern variants are subtler: a cloned front end at a lookalike domain, a paid search advert above the real site, a fake airdrop page, or a direct message from someone posing as support staff. Because blockchain transactions are irreversible and pseudonymous, a successful phish usually means permanent loss. The defences are mundane but effective: bookmark the sites you use, verify domains character by character, never enter a seed phrase into a screen, and treat unsolicited help as suspicious.

Related terms

More in Wallets & Security

API Key Permissions · Bridge Exploit · Bug Bounty Programme · Clipboard Hijacking · Cold Storage · Collection Approval (setApprovalForAll) · Custodial vs Non-Custodial · Custody Insurance · Dual Control · Dusting Attack · EIP-712 Signing · Evil Maid Attack