What Phishing Is in Crypto and How to Spot It
Crypto phishing: what it looks like, how fake sites and messages work, and the habits that keep your wallet and accounts safe.
Phishing in crypto is a fake site, email, or message that looks real enough to get you to hand over a password, a seed phrase, or money. It is social engineering, not hacking. Nobody breaks your security; they talk you into giving it away.
What a typical phishing attempt looks like
An email from "exchange support" asks you to confirm your account urgently. The link goes to a site with the right logo and layout, but the URL differs by one character. You enter your password and 2FA code. The attacker uses both on the real site in real time, while you are staring at a loading screen.
How to recognize it
Check the URL, not the design. Design is easy to copy; a convincing URL is harder to fake. Check the address bar every time you log in, even when nothing feels wrong.
Urgency is a signal. "Your account will be locked in one hour." "Act now or lose access." Legitimate services do not pressure you into immediate action under a threat. When you see that framing, slow down.
Phishing through Telegram
Bots and accounts that impersonate support for known services. They ask for your seed phrase "for verification" or tell you to connect your wallet to an "official" channel. No real service ever asks for a seed phrase or private key. If something asks for either, it is a scam.
Fake apps
A wallet or exchange app downloaded from an unofficial source collects your keys and seed phrases the moment you use it. Only install apps from official sources.
The habit that actually works
Before entering any credentials, open the site yourself by typing the address directly. Do not follow links from emails or messages. Type the URL, check it, then log in.
