Protect your wallet secrets
- Never share private keys or recovery phrases.
- Secure your device with current software, a strong screen lock and trusted apps.
- Keep recovery information offline or in a storage method you understand and control.
Recognize phishing
- Verify website domains before connecting a wallet or entering information.
- Avoid unknown links, unexpected downloads and urgent direct messages.
- Beware of fake support accounts, giveaways and requests to “validate” a wallet.
Understand what you sign
- Review token approvals carefully, including spending limits and duration.
- Do not connect to suspicious dApps.
- Check the requesting site, contract and action before approving a signature.
- Cancel when the request is unclear.
Check every transfer
- Confirm the full recipient address, not only the first and last characters.
- Verify the asset and network match the destination.
- Review the amount and network fee.
- For a new destination, consider a small test transaction when practical.
No checklist can remove every risk. Keep learning, verify independently and pause whenever an action feels unfamiliar.