A copied logo or a convincing message is not proof of identity. Use a saved official address to reach a service instead of a link in an unsolicited message. Treat urgency, guaranteed returns and requests to move a conversation as signals to pause and verify.
Use a unique password and the strongest supported second factor for exchange accounts. Never share a recovery phrase, private key or one-time login code with someone claiming to be support. A hardware wallet still needs careful review of the transaction you approve.
If something looks wrong, stop signing and use official support channels. Preserve transaction details and messages. Recovery promises can themselves be scams; do not pay an unknown party merely because they claim they can recover missing crypto.
Verify the route to the service
Use an official address saved from a trusted source. Reaching a familiar-looking login through an advertisement or message creates another step to verify.
Check the domain before entering credentials. If a request creates urgency, pause and contact the service through an independently located channel.
Protect access and approvals
Use a unique password and the strongest available second factor. Keep recovery information separate from everyday browsing.
Review wallet signatures on a trusted display. A convincing page can still request an action that has nothing to do with the task you intended.
Keep a clear incident record
If you suspect a problem, stop further approvals and collect transaction details and messages. Use official support and relevant reporting channels.
Treat unsolicited recovery offers with the same caution as the original message. Paying another unknown party can add a second loss.
A practical checklist
- Use a saved official address.
- Keep credentials and recovery phrases private.
- Stop and verify unexpected requests.
Common questions
Does a copied logo prove a message is real?
No. Verify the sender through the organisation's official channel.
What if someone guarantees recovery?
Verify the claim independently and do not provide secrets or pay an unknown party on that promise.
Prepared from the primary sources linked below. This is documentary research, not a hands-on product test, personalised advice or an independent security audit.
Sources and further reading
An introductory guide. Consider your circumstances and consult the linked primary sources.
