Security

Phishing

A scam that tricks you into revealing keys or signing a malicious transaction by posing as something you trust.

The classic version is a fake email or website that looks like your exchange or wallet, harvesting your password or seed phrase when you type it. In crypto it's gotten sharper: a cloned dApp that asks you to 'approve' a transaction draining your tokens.

Because crypto transfers are irreversible, a single bad click can be final. Defenses are mostly habits: check the exact URL before connecting, and never type a seed phrase into a website. No legitimate support team will ever ask for your private key.

Related terms