Pressure
Act now or lose access. Claim before the timer ends. Move funds while the caller stays on the line.
Safety centre / calm beats fast
Stop.
Check.
Then sign.
Crypto security is not about memorising every scam. It is about recognising pressure and using the same deliberate routine every time.
Protect the keysRead the requestProve the route
Think something is wrong?
Protect what remains first.
01
Stop interacting
02
Use a clean device
03
Move or revoke
04
Preserve evidence
Recognise the script
Different story. Same four levers.
Authority
A fake support agent, company, regulator, celebrity, employer, or investigator tells you to trust the role.
Reward
Free tokens, guaranteed returns, a refund, a job, or recovered funds make the next action feel worth the risk.
Secrecy
You are told not to contact the organisation, not to tell family, or not to interrupt a confidential process.
The safest move is often to break the communication channel. Do not use the link, QR code, phone number, or account supplied in the message. Contact the organisation independently.
The three-pause routine
A repeatable check beats a perfect memory.
01 / Before you connect
Verify the place
- Reach the site independently
- Check the complete domain
- Use a low-value wallet for unfamiliar apps
- Know why the connection is needed
02 / Before you sign
Read the permission
- Name the action you expect
- Check network, contract, token, and amount
- Reduce excessive spending caps
- Reject an unclear or surprising request
03 / Before you send
Prove the route
- Confirm the recipient independently
- Match the network on both sides
- Send a small test first
- Wait for receipt before sending more
Safety library
Know what to do next
01 / Safety10 min
How to protect a recovery phrase
What a recovery phrase controls, where not to store it, and how to build a backup you can actually recover.
02 / Safety11 min
How to read a wallet signing request
A practical routine for transactions, token approvals, signatures, and prompts that are not designed for humans.
03 / Safety9 min
Crypto phishing and fake support: recognise the script
How urgency, authority, rewards, QR codes, and recovery promises are used to move you toward one dangerous action.
04 / Safety8 min
Secure the accounts around your crypto
Why email, passwords, 2-step verification, withdrawal controls, and devices matter before any wallet advice.
05 / Safety10 min
What to do if a crypto wallet may be compromised
A calm incident-response sequence for suspicious signatures, exposed phrases, malicious approvals, and stolen funds.
06 / Safety5 min
3 crypto scams beginners should know
Fake airdrops, fake support, and too-good-to-be-true yield explained calmly.
Five hard lines
Never means never.
- 01Enter a recovery phrase into a website to connect, verify, claim, migrate, or unlock anything.
- 02Let an unexpected support agent remotely control your screen or device.
- 03Move money to a new wallet because a caller says your current account is unsafe.
- 04Assume a wallet warning makes every other request safe, or that no warning means no risk.
- 05Pay an unsolicited recovery service that guarantees it can reverse a blockchain transaction.
Source-checked guidance