On this page
Start with the right mental model
Phishing & Scams is not an isolated feature; it belongs to a wider wallet workflow. Recognize fake websites, impersonated support, fake airdrops and signature-based scam patterns. Before acting, understand how fake websites, impersonated support and fake airdrops relate to one another. A blockchain network records state, while a wallet helps manage keys, organize account information, and construct or sign requests. A wallet cannot independently certify that every third-party site or contract is trustworthy. For that reason, do not rely on a label or balance display alone. Cross-check the network, destination, contract information and transaction details.
- Review: fake websites
- Review: impersonated support
What to verify before acting
Before a task involving Phishing & Scams, verify four categories of information. First, check source and identity, such as the domain, application source and whether short links matches your expectation. Second, confirm the network environment, including the selected chain, malicious signatures and the fee context. Third, review the target, such as a recipient, contract, spender or validator. Finally, understand the expected result: what record will be created, whether confirmations are needed, and whether the action can be undone. If a step cannot be explained, urgency is a reason to stop rather than continue.
- Review: impersonated support
- Review: fake airdrops
How on-chain results appear
Requests involving domain checks, social engineering or urgency tactics can create on-chain consequences rather than a simple website-side update. A submitted transaction normally enters the network, may wait for inclusion, and then accumulates confirmations. Fee rules, confirmation speed and failure behavior differ by network. The same-looking EVM address on two networks does not cause assets to move automatically between them. When checking status, a transaction hash, block height and reputable block explorer provide a stronger reference than a screenshot or verbal claim because they map directly to public chain data.
- Review: fake airdrops
- Review: short links
Common mistakes and risk boundaries
Frequent mistakes include assuming a wallet connection grants every later permission, assuming identical address text means identical networks, treating a token label as proof of contract identity, or expecting a wallet to reverse a broadcast transaction. With Phishing & Scams, also account for malicious contracts, phishing domains, clipboard substitution, shared devices, remote-control software and permissions that are broader than necessary. Stop when a page or person asks for a seed phrase, private key or verification code. Urgency, compensation and airdrop language are not reasons to skip domain and signature checks. Security should come from verifiable steps and least-privilege decisions, not from claims such as “completely safe” or “guaranteed recovery.”
- Review: short links
- Review: malicious signatures
A repeatable review sequence
A practical sequence is to confirm the task and its source, verify the network, verify the destination or contract, read the signature or transaction details, confirm the amount and gas, and then retain the transaction hash after submission. For DApps, review active connections and approvals after completing the task. For seed phrases and private keys, use offline storage and never send them to another person. Over time, turning fake websites, fake airdrops, malicious signatures and urgency tactics into a consistent checklist is more reliable than depending on last-minute warnings.
- Review: malicious signatures
- Review: domain checks