Crypto's security is mathematically strong. People are not, and that is where attackers focus. This guide maps the main threats to your recovery phrase, so that you can recognize them early. This is part of Crypto secrets.

The rule that stops most scams

Nobody legitimate will ever ask for your seed phrase. Start with that article, because it covers the scam you are most likely to meet.

Someone asked for your words: what now?
  1. STEP 01
    Stop

    Do not type, read out or photograph anything.

  2. STEP 02
    Leave

    Close the page, chat or call. Urgency is the trick.

  3. STEP 03
    Check

    Go to the maker's site by typing the address yourself.

  4. STEP 04
    Move

    If you already shared the words, move your funds now.

There is no exception to this. A real support agent, app or wallet maker has no need for your words.

The main kinds of threat

ThreatWhat it looks likeYour defense
Fake supportA helpful agent in chat or emailLearn the common scams
Phishing sitesA copy of a wallet or exchange siteRead about wallet drainers
Fake appsA wallet app from a search adInstall only from official links
Malicious approvalsA site asks you to sign a transactionRead what you sign, and use a separate wallet for trying new sites
Pre-written phrasesA device or card that arrives with wordsSee pre-generated phrase scams
MalwareSoftware on your computer watching youSee clipboard hijackers
Physical threatsBurglary or coercionSee physical threats

If it goes wrong

If your phrase was exposed, speed matters more than anything. Follow what to do in the next hour. Create a new wallet, move your funds, and expect follow-up recovery scams.

Strong basics help here too

Your email and exchange logins are a way into your crypto, so your everyday password habits are also crypto security. Fake login pages are the same trick whichever account they target, and a strong, unique password with two-factor login closes the easiest door.