Phishing & scam defense
Phishing remains the most common way attackers harvest credentials. Attackers create convincing fake pages or send emails that look legitimate. Always check the URL carefully, never follow login links in unsolicited messages, and prefer bookmarks or the official app when signing in.
Recognize suspicious login prompts
- Unexpected pop-ups requesting codes or phrases.
- Domains with small typos or unusual subdomains.
- Messages pressuring you to act immediately (social engineering).
If you fall for a scam
Immediately from a safe device: change your password, revoke sessions, and contact official support. Freeze withdrawals if the platform supports it, and prepare evidence (screenshots and timestamps) to help investigate and recover funds where possible.
Maintain security throughout your crypto journey
Security is ongoing: review settings quarterly, practice recovery steps, and keep at least one secure offline backup of critical recovery materials. Combine strong authentication with careful operational habits to minimize risk while you trade and hold assets.