DeFi Safety · How-to
How to Spot and Avoid a Phishing Site
Most crypto losses start with a fake site that looks real. Verify the domain every time — a padlock isn't enough.
You'll need: Nothing but caution.
Steps
- Bookmark the real sites you use and only ever open them from the bookmark.
- Never follow links from DMs, emails, or search ads to a crypto site.
- Read the domain character by character — attackers register look-alikes (extra letters, swapped characters).
- Check for urgency: 'act now or lose your allocation' is a manipulation tactic, not a real deadline.
- Never enter a seed phrase or private key on any website, ever — no legitimate site asks.
- Before signing any transaction, read what it actually does, not just the site's description.
Watch outA valid HTTPS padlock only means the connection is encrypted — a phishing site can have one. The padlock says nothing about whether the site is honest.
Go deeper: DeFi From Scratch
The DeFi guide breaks down the five attacks that drain wallets and the 60-second safety checklist.
Get the guide