Explanation
In crypto a successful phishing attempt is final: transactions are irreversible. Always check the domain, use bookmarks and never sign a transaction you do not understand.
What it looks like today
The classic bad email has largely been replaced by professional work: sponsored search results ranking above the real site, fake support agents in Telegram and Discord who respond first when you ask a question, counterfeit wallet updates, and text messages supposedly confirming a suspicious withdrawal.
Five rules that prevent most of it
Bookmark official sites and never use a search result. Whoever contacts you first is suspect. Nobody ever needs your seed phrase. Never sign a transaction you do not understand. And run two-factor authentication through an authenticator app rather than SMS, since SIM swapping is a real problem in the Benelux.
Key takeaways
- Bookmarks instead of search results.
- Whoever contacts you first is suspect.
- Authenticator app, not SMS.
Frequently asked questions
+I clicked but entered nothing — now what?
Clicking alone is usually harmless. Still, check your wallet approvals, revoke unknown ones and, if in doubt, move your balance to a new wallet.