Phishing is one of the most common ways people lose crypto, and it relies on deception rather than any technical flaw. Instead of breaking into a wallet, an attacker tricks the owner into handing over access, often through a fake website, email, or message that imitates a real exchange, wallet, or support team.
A typical example is a link leading to a near-perfect copy of a well-known site, where entering your recovery phrase sends it straight to the attacker. Others impersonate support staff in chat groups, or claim there is an urgent account problem that requires you to verify your keys. The pressure to act fast is itself a warning sign, meant to stop you thinking carefully.
A few simple habits stop most phishing. No legitimate service will ever ask for your seed phrase, so any such request is a scam. Type website addresses yourself, be wary of unexpected messages, and slow down whenever something feels urgent.
