Crypto opens the door to financial freedom — and, unfortunately, to scammers who prey on beginners. The good news: a few simple habits block most attacks. Use this guide as your permanent reference whenever you click a link, connect a wallet, or buy a new token.

✅ Quick Safety Checklist

• Start from official links (exchange website, verified social bios, app stores).
• Double-check URLs (spelling, subdomains, SSL lock icon). Never trust links in random DMs.
• Use a hardware wallet for long-term funds; keep a small “spend” wallet for daily use.
• Enable 2FA (authenticator app, not SMS) on exchanges and email.
• Never share your seed phrase — no support rep will ever ask.
• Review approvals and revoke suspicious dApp permissions regularly.
• Bookmark exchange/portfolio/wallet URLs and use those bookmarks.

🚩 10 Common Crypto Scams (and How to Avoid Them)

1) Phishing (Websites, Emails, DMs)

Look-alike sites trick you into entering keys or passwords. How to avoid: type the URL yourself, use bookmarks, verify SSL and spelling, and never enter a seed phrase online.

2) Fake “Support” or “Recovery” Reps

Impostors DM you after you post a question. Avoid: support never DMs first; open a ticket from the official site only.

3) Giveaway & “Double Your Crypto” Scams

Fake accounts promise to send more if you send some first. Avoid: if you must ask “is this real?”, it isn’t.

4) Rug Pulls & Exit Scams

Token creators drain liquidity and disappear. Avoid: check contract ownership, liquidity lock, audits, docs, and real community.

5) Pump-and-Dump Groups

Coordinated spikes dump on late buyers. Avoid: steer clear of “signals,” celebrity pumps, and tokens with no utility.

6) Fake Airdrops & Drainer Links

Clicking “claim” can grant unlimited spending approvals. Avoid: use a burn/airdrop-only wallet with $0 balance.

7) Address Poisoning

Attackers send tiny tokens so their address appears in your history, hoping you copy it. Avoid: always paste-compare full addresses and use address labels.

8) Dusting Attacks

Tiny tokens sent to track wallets and social connections. Avoid: don’t interact with unsolicited tokens; hide or ignore them.

9) Malicious Wallets/Apps & Browser Extensions

Fake apps steal keys. Avoid: install from official app stores and verified links; check publisher, downloads, and reviews.

10) Clipboard Hijackers & Malware

Malware swaps your pasted address. Avoid: use reputable antivirus, auto-updates, and always verify the first/last 6 characters before sending.

🔍 How to Verify Projects, Tokens, and Links

1. Start from the source: official website/app store/verified social bio.
2. Check the URL: domain age, HTTPS, spelling, and unexpected subdomains.
3. Contract address: copy from the official site and confirm on a block explorer (holders, creator, verified code).
4. Audits & docs: look for reputable auditors, whitepaper/docs, and a transparent team.
5. Community reality check: authentic posts, consistent updates, and engagement outside of hype moments.

🛡️ Pro Safety Habits (Set & Forget)

• Hardware wallet + seed backup: store the phrase offline (metal or quality paper), split location from device.
• Two-wallet setup: one “vault” wallet, one “spend” wallet with limited funds.
• Approval hygiene: periodically revoke token approvals on chains you use.
• Email security: dedicated crypto email, strong unique passwords, and TOTP 2FA (not SMS).
• Network allowlist: bookmark dApps; consider a privacy-focused browser profile just for crypto.
• Transaction preview tools: use wallet simulators to see what you’re signing.

🧩 If You Get Scammed: What to Do

1. Move remaining funds to a fresh wallet immediately.
2. Revoke suspicious approvals on explorers/tools.
3. Scan your device for malware; rotate passwords and reset 2FA.
4. Collect evidence: screenshots, TX hashes, URLs, usernames.
5. Report to your exchange/wallet provider and relevant platforms. Consider filing a report with your local cybercrime unit.

Heads up: most on-chain transactions are irreversible. The goal is to stop further loss and help platforms catch repeat offenders.

❓ FAQ

Should I ever share my seed phrase? Never. No legitimate service needs it.

Is SMS 2FA safe? Better than nothing, but SIM-swap risks exist. Prefer an authenticator app.

Are hardware wallets worth it? Yes — they isolate your private keys from internet-connected devices.