All terms
Tricking you into revealing keys or signing a malicious transaction.
Crypto phishing takes several forms: fake wallet sites, fake support agents in Discord, poisoned search ads, and copycat domains one character different from the real one.
The goal is always the same. Get you to type your seed phrase somewhere, or get you to sign a transaction that hands over your assets.
Bookmark the real sites you use and navigate from your bookmarks. Never click a wallet link from a search ad.
That phishing means a badly spelled email. The expensive version is a paid search advert above the real result, a reply from an account that looks like support, or a site identical to the real one at an address one character out. Nothing about it looks wrong.
Common questions
What does a crypto phishing attempt actually look like?
Is a hardware wallet enough to stop phishing?
Where this comes up on the site
The guides that actually use this word, rather than a list of everything we have written.
Where to go next
More security terms
Want this explained out loud?
Some of these land faster in conversation than in writing. Sessions are one to one and you can ask anything, including the things that feel too obvious to ask.