🚨 Critical Security Rules
NEVER Share Your Seed Phrase
Your 12-24 word seed phrase (recovery phrase) gives complete access to all your funds. No legitimate company, support team, or person will ever ask for it. Anyone who asks is trying to steal from you.
NEVER Enter Your Seed Phrase on a Website
Your seed phrase should only ever be entered into your wallet software when recovering a wallet on a new device. Never type it into any website, form, or message.
🛡️ Seed Phrase Protection
Your seed phrase is the master key to your cryptocurrency. Protect it with these practices:
- Write it down on paper or engrave on metal - never store digitally
- Store in a secure, fireproof, and waterproof location
- Consider multiple backup locations (e.g., home safe and bank deposit box)
- Never take a photo or screenshot of your seed phrase
- Never store in cloud storage, email, or password managers
- Consider splitting your seed phrase between multiple secure locations
🎯 Common Scam Types
Be aware of these common cryptocurrency scams:
📧 Phishing Attacks
Fake websites or emails that look like legitimate services, designed to steal your credentials or seed phrase. Always verify URLs carefully.
💬 Fake Support Scams
Scammers impersonate support staff on social media or Discord. Remember: Real support will NEVER DM you first or ask for your seed phrase.
🎁 Giveaway Scams
"Send 1 ETH, get 2 back" - These are always scams. No legitimate person or company gives away free cryptocurrency this way.
🔗 Malicious Links
Links in emails, messages, or social media that lead to fake websites or malware. Hover over links to check the actual URL before clicking.
📦 Fake Airdrops
Unsolicited tokens in your wallet with "claim" websites. These often lead to malicious contracts that drain your wallet.
✅ Security Checklist
Device Security
- Keep software and operating systems updated
- Use antivirus and anti-malware software
- Enable screen lock on all devices
- Avoid public WiFi for crypto transactions
Account Security
- Use unique, strong passwords
- Enable two-factor authentication (2FA)
- Use hardware 2FA (like YubiKey) if possible
- Use a password manager
💻 Safe Browsing Practices
- Bookmark official websites - Don't rely on search results or links
- Check the URL carefully - Scammers use similar-looking domains (e.g., metamask.io vs metamask.com)
- Look for HTTPS - But remember, scam sites can also have HTTPS
- Verify on multiple sources - Confirm information from official social media and websites
- Don't click email links - Type the website address directly into your browser