What is Phishing?

An attack that tricks you into revealing your seed phrase, keys, or a signed transaction by impersonating a trusted site or support agent.

How it works

In crypto the payoff is immediate and irreversible: a phished seed phrase or a malicious signature drains the wallet with no chargeback. The defense is procedural — never enter a seed phrase anywhere, verify domains character by character, and treat urgency as a red flag.

Example

In practiceA DM 'from support' sends a wallet-sync link; the site is a pixel-perfect clone that harvests your seed phrase on entry.

How do I verify a site is legit?

Bookmark the real domain and only ever use the bookmark. Never follow links from DMs, emails, or search ads.

Go deeper: DeFi From Scratch

The complete, step-by-step guide — every command, config, and the reasoning behind it.

Get the guide