Risk Level: High Risk
Fake websites, emails, and messages designed to steal wallet credentials, seed phrases, and private keys.
What It Is
Crypto phishing attacks use fake websites, emails, social media messages, and malicious apps to trick users into revealing their wallet credentials, seed phrases, or private keys. Once obtained, attackers drain wallets instantly and irreversibly. Crypto phishing is one of the most common and financially devastating forms of crypto fraud.
How It Works
- Attacker creates a convincing fake version of a legitimate exchange, wallet, or DeFi platform.
- Victims are directed to the fake site via email, social media, search ads, or Discord messages.
- Victim enters their credentials or seed phrase, believing they’re on the legitimate site.
- Attacker uses the credentials to access the real account and drain all funds.
- Some attacks use malicious smart contracts that request excessive permissions when “connecting” a wallet.
Warning Signs
- URL is slightly different from the legitimate site (e.g., “coinbase-login.com” vs “coinbase.com”)
- Urgent messages about account suspension, security alerts, or verification requirements
- Any request for your seed phrase or private key — legitimate services NEVER ask for these
- Smart contract requesting unlimited token approvals
- Unsolicited DMs on Discord, Telegram, or Twitter offering help or opportunities
- Search ads appearing above legitimate exchange results
What To Do
- Never enter your seed phrase anywhere except when restoring a wallet you control
- Always type exchange URLs directly — never click links in emails or messages
- Use a hardware wallet for significant crypto holdings
- Revoke unnecessary token approvals using tools like Revoke.cash
- If you’ve been phished, move remaining funds to a new wallet immediately
- Report to the legitimate platform being impersonated
- Report to your national cybercrime authority
Frequently Asked Questions
I entered my seed phrase on a fake site. What do I do?
Act immediately. Create a new wallet and transfer all remaining funds to it right now — before the attacker does. Your current wallet is permanently compromised. Do not use it again. Report the incident to your national cybercrime authority.
How do I stay safe from crypto phishing?
Bookmark legitimate exchange URLs and always use bookmarks. Enable 2FA on all accounts. Use a hardware wallet. Never share your seed phrase. Be suspicious of any urgent security messages. Use browser extensions like MetaMask’s phishing detection. Verify smart contract permissions before approving.