Scams and safety quiz

It grants blanket transfer permission over a collection, standing until revoked. A genuine free claim never needs authority over things you already own.

Bots watch public groups for anyone asking for help. Names, photos and badges are all trivially copied, and support desks essentially never initiate contact.

Paid adverts sit above organic results and drainer operators buy them constantly. A bookmark you made when you knew the domain was right removes the entire attack surface.

The attacker sends a dust transaction from an address matching yours at the start and end. Later you copy from your own history and send to them, and nothing was hacked at all.

Urgency is not a side effect of these attacks, it is the mechanism. It exists specifically to stop the boring check that would end the whole thing.

The device protects the key, not your judgment. If you press confirm on a malicious transaction after reading it, the device does exactly what you told it to.

Nobody can reverse a confirmed blockchain transaction, so there is nothing to sell. Recovery offers target people who have just proven they can be persuaded.

It cancels future authority, not past transfers. Wallets drained months after the fact are almost always an old approval being called, which is why periodic revocation matters.