Phishing Scams in Crypto and Web3
- Last Updated: July 1, 2026
Phishing scams have evolved from simple email fraud into one of the most widespread and deceptive threats in the crypto and Web3 ecosystem.
Originally designed to steal passwords or credit card numbers via fake emails, phishing has matured alongside digital finance.
Today’s attackers impersonate trusted crypto platforms, wallet providers, and DeFi apps—crafting near-perfect replicas to deceive users into revealing wallet seed phrases, private keys, or login credentials.
In the blockchain world, where transactions are irreversible, a single mistake can result in immediate asset loss or fully drained wallets.
Fraudsters exploit trust and urgency, using fake emails, cloned websites, and fraudulent social media messages to deceive victims.
Why Phishing Scams Are So Dangerous
Phishing is one of the most common entry points for larger fraud schemes. Once an attacker gains access to a victim’s credentials, they can:
– Drain crypto wallets: Attackers steal crypto wallet seed phrases or manipulate transactions.
– Trigger blackmail/extortion scams: Stolen personal data is used for ransom threats.
– Deploy fake airdrop/NFT scams: Victims unknowingly sign malicious smart contracts.
Unlike traditional banking fraud, crypto phishing attacks have no centralized fraud protection.
Once a wallet is compromised, funds are lost permanently.
This chapter* explains:
– How phishing scams serve as an entry point for other types of crypto fraud.
– The different types of phishing scams, including email phishing, fake websites, and fraudulent messages.
– How phishing connects to wallet scams, blackmail, and NFT fraud to expand its impact.
– Key warning signs and red flags that indicate a phishing scam attempt.
*This blog post features a chapter from the book,
The Crypto and Web3 Scams Prevention Guidebook.
Find more chapters and information about the book here >>>
Table of Contents
Phishing Scams to Watch For in Crypto and Web3
In phishing, the goal isn’t to breach your wallet—it’s to get you to open the door yourself.
Below are key tactics used in Web3 and crypto phishing scams and how to recognize them before it’s too late.
1. Email Phishing
Email phishing is a common scam where attackers impersonate trusted crypto platforms like exchanges or wallet providers. Victims receive emails claiming urgent issues, such as account suspension or unauthorized access, and are prompted to click a link.
These links often lead to fake websites designed to steal login credentials or wallet seed phrases.
👁️ Example:
A fake email from a cryptocurrency exchange warns of an “account suspension due to unusual activity” and provides a malicious link to “secure” the account.
Clicking the link leads to a fake login page, where users unknowingly enter their login credentials or wallet seed phrase, giving attackers full access.
🚩 Red Flags:
– Email domain variations (e.g., contact@coínbase.com, contact@coinbase-help.com)
– Use of urgency, such as “Immediate action required!” to manipulate quick reactions.
– Embedded links that differ from their displayed URLs when hovered over.
🛡️ How to Avoid:
– Verify sender domains carefully: Ensure emails come from official domains, not lookalikes.
– Manually type URLs into your browser: Don’t click links in emails; go directly to the site.
– Avoid acting on urgent language: Phishing relies on panic. Pause, and verify first.
Educational Note:
The image below shows an email phishing attempt impersonating a popular crypto wallet provider. Branding has been removed for educational purposes.
This email is a phishing scam attempting to steal your crypto wallet credentials by impersonating a trusted service. Here’s how you can identify it as fraudulent:
– Fake Urgency & Threats: Claims that unverified accounts will be suspended to create panic and pressure quick action.
– Suspicious Sender & Links: Sent from “info@artiagri.com”, an unrelated domain, with a “Verify” button leading to a phishing site.
2. Spear Phishing
Spear phishing is a targeted scam where attackers craft personalized emails using real information, like your name, email, or crypto activity, to appear more convincing.
These messages often claim there’s suspicious account activity and direct victims to fake websites that steal login credentials or wallet access.
Example:
A trader receives an email appearing to be from a popular NFT marketplace. The email references the trader’s real NFT collection and warns about “unauthorized activity.”
The email contains a fake link, leading to a fraudulent login page where the victim enters credentials, unknowingly giving scammers control of their wallet.
Red Flags:
– Emails containing personal details (name, surname, phone number, and even home address).
– Urgent messages such as “Your account is at risk!”
– Slight domain variations in sender addresses:
– Legitimate: support@binance.com
– Fake: support@bìnance.com (Small accent on “i”)
– Fake: support@binance.co (Incorrect top-level domain)
How to Avoid It:
– Double-check sender email addresses: Verify domains and spelling before responding.
– Avoid clicking links in emails: Navigate directly to the official site to log in or verify activity.
– Use anti-phishing codes: Activate this feature on platforms like Binance or Kraken to confirm legitimate emails.
Educational Note:
The image below illustrates real data breaches exposing sensitive user information on the dark web. The branding has been removed to focus on scam tactics and cybersecurity awareness.
This email is a spear phishing scam designed to exploit trust by using the recipient’s real name and surname while creating fear of a security breach.
Here’s how you can identify it as fraudulent:
– Spear Phishing & Fake Security Breach Alert: Personalizes the message with real user details and falsely claims a major data leak affecting thousands of customers to create urgency and panic.
– Suspicious Sender & Links: Sent from “contact@lonniebush.com”, an unrelated domain, and includes a “Upgrade to Latest Version” button leading to a phishing site.
– Manipulative Call to Action: Urges the recipient to immediately update their device due to a supposed exploit, tricking them into installing malware or providing sensitive information.
3. Clone Websites
Clone websites are fake versions of real crypto platforms designed to steal user information.
Scammers copy the look and feel of popular exchanges or wallets but use slightly altered web addresses to trick users into entering credentials, private keys, or approving harmful transactions.
Example:
A scammer registers metamâsk.io instead of metamask.io to trick users into entering their private keys.
Red Flags:
– Misspelled or spoofed domains (e.g., binnance.com, metamask-wallet-verify.com)
– Lack of HTTPS or a security padlock
– Wallets asking for seed phrases or token approvals up front
How to Avoid:
– Bookmark trusted crypto platforms: Always access them through saved links, not search engines.
– Manually verify URLs: Check for spelling and certificate validity.
– Use security extensions: Tools like MetaMask’s phishing detector can block known scam domains.
Cross-reference:
Clone websites are also used in NFT Marketplace Scams (Ch. 12).
4. Malvertising (Fake Ads Promoting Phishing Sites)
Malvertising is a scam tactic where attackers pay for ads on search engines or social media to promote fake crypto websites.
These ads often appear above legitimate results and lead to clone sites that steal login credentials or trick users into connecting their wallets.
Example:
A user searches for MetaMask login, but the top result is an ad for a fake MetaMask site that steals login credentials.
Red Flags:
– Sponsored search results leading to phishing sites
– URLs with extra words like metamask-wallet-verify.com
– Ads that appear above official search results
How to Avoid:
– Avoid clicking on crypto ads: Type the official domain directly into your browser.
– Use ad blockers: Reduce exposure to potentially harmful sponsored results.
– Double-check domain authenticity: Make sure you’re on the real platform before connecting a wallet.
5. Smishing (SMS Phishing)
Smishing is a phishing tactic where scammers send fake text messages that appear to come from crypto exchanges, wallets, or DeFi platforms.
These messages often claim urgent issues, like locked accounts, and include links to phishing sites designed to steal login credentials or trick users into taking unsafe actions.
Example:
A user receives an SMS saying:
“Your account has been locked due to suspicious activity. Click here to verify: biance-secure-login.com.”
Red Flags:
– SMS from unknown numbers with login requests.
– Links that resemble crypto services but are slightly altered.
– Poor grammar and formatting errors.
How to Avoid:
– Avoid clicking on links in SMS messages: Instead, log in directly through official apps.
– Filter SMS messages: Enable spam detection and reporting in your messaging app.
– Use MFA alternatives: Choose app-based 2FA instead of SMS for added protection.
Educational Note:
This is a smishing (SMS phishing) scam designed to trick the recipient into clicking a malicious link or calling a fraudulent number by creating fear of unauthorized activity.
Here’s how you can identify it as fraudulent:
– Urgency & Fear Tactics: Claims a suspicious withdrawal or unauthorized device registration to panic the recipient into taking immediate action.
– Suspicious Links & Phone Numbers: Includes a non-official link (e.g., “https://___team.com”) and an unverified phone number (+493031192055), both likely used to steal login credentials or personal data.
– Generic & Impersonal Messaging: Does not mention a specific company name or account details, indicating a mass phishing attempt rather than a legitimate security alert.
6. Vishing (Voice Phishing): A Verbal Variation of Phishing Attacks
Vishing is a voice-based phishing scam where fraudsters impersonate crypto exchange security teams, wallet providers, or law enforcement over the phone.
Unlike traditional phishing that relies on fake emails or websites, vishing leverages verbal deception to pressure victims into revealing sensitive credentials or approving fraudulent transactions.
Scammers often use caller ID spoofing to appear legitimate and apply urgency tactics to manipulate victims into acting without verification.
Example:
A scammer calls claiming to be from your exchange’s security team, warning of suspicious activity and urging you to “verify your account” by sharing login details or approving a fraudulent withdrawal.
Red Flags:
– Calls claiming to be from exchange security teams requesting sensitive information.
– Caller ID spoofing makes the number appear legitimate.
– High-pressure tactics like “Act now to save your funds!”
How to Avoid:
– Hang up and verify independently: Contact the platform directly through official support channels.
– Never give sensitive information over the phone: Support teams never ask for passwords or seed phrases.
– Be cautious with urgent calls: Legit companies won’t pressure you to act immediately over the phone.
Cross-reference:
Vishing is a phishing scam (Ch. 2) rather than a purely social engineering scam (Ch. 1), as it relies on deception rather than prolonged trust-building. However, social engineering tactics, such as urgency and authority manipulation, make vishing highly effective.
7. QR Code & Address Poisoning
QR code and address poisoning scams involve attackers tampering with wallet addresses or generating fake QR codes to intercept transactions.
Victims often copy a wallet address or scan a code, unaware that it’s been altered to redirect funds to the scammer instead of the intended recipient.
Example:
A trader copying a wallet address from a block explorer accidentally copies a scammer’s modified version, unknowingly sending funds to the attacker instead of the intended recipient.
Red Flags:
– Unexpected wallet addresses appearing in transaction history.
– QR codes leading to phishing websites.
– Pre-filled wallet addresses in transaction fields.
How to Avoid:
– Always double-check wallet addresses: Compare the first and last 6–8 characters before sending.
– Avoid copy-pasting from transaction history: Use secure address books.
– Scan QR codes only from trusted platforms: Don’t scan codes shared via DMs or social groups.
Cross-reference:
Address poisoning is also used in DeFi & Exchange Scams (Ch. 7).
8. Ice Phishing (Smart Contract Exploits)
Ice phishing is a scam that tricks users into unknowingly permitting scammers to access their crypto assets through malicious smart contract approvals.
Instead of stealing passwords or private keys, attackers manipulate wallet permissions—often through deceptive DApps or staking platforms—to gain control over funds.
Example:
A DeFi yield farming project asks users to approve token spending before staking assets. However, the contract silently grants scammers unlimited access to the victim’s funds.
Red Flags:
– DApps requesting unlimited approvals on all tokens
– Approval prompts that appear before showing any actual function
– No contract audit or open-source code
How to Avoid:
– Revoke permissions regularly: Use tools like Revoke.cash to audit and remove unnecessary approvals.
– Read transaction prompts carefully: Look for “Approve” or “Spend” functions with unlimited access.
– Vet unknown DApps: Stick to platforms with transparent audits and verifiable team details.
Cross-reference:
Ice phishing is common in Smart Contract Exploits (Ch. 5).
Manipulation Tactics Used in Phishing Scams
Phishing scams don’t just trick victims with fake links or login pages—they exploit behavioral psychology to make those traps more convincing.
This chapter explores the psychological levers behind phishing scams: urgency, trust, social proof, and fear. You’ll learn why these tactics are so effective—and how scammers use them to bypass your critical thinking.
By recognizing these patterns, you’ll be better equipped to spot phishing scams early, avoid deceptive triggers, and confidently protect your digital assets.
1. Exploiting Fear, Urgency, and FOMO
Scammers create panic and urgency to pressure victims into making hasty decisions before they have time to think critically.
Example:
An email claims, “Your wallet will be locked in 24 hours unless you verify your account now.”
Why It Works:
Fear and urgency override logical thinking, making victims act impulsively.
How to Counter:
Slow down and validate the threat through official channels.
– Always verify claims directly with the official source before taking action.
– Check URLs carefully before clicking links in security alerts.
– Enable anti-phishing codes to validate real messages.
2. Impersonating Trusted Brands and Services
Phishers create fake websites and emails that closely mimic trusted crypto platforms, such as exchanges, wallet providers, or DeFi services.
Example:
A phishing email designed to look like your crypto exchange asks you to reset your password via a fraudulent login page.
Why It Works:
Familiar branding reduces skepticism, making users more likely to trust the request.
How to Counter:
Stick to manual URL entry when logging in to critical platforms.
– Never click on links in unsolicited emails; always type the website URL manually.
– Use browser security tools to detect and block phishing sites.
3. Exploiting Greed and Unrealistic Promises
Scammers lure victims with promises of free crypto, high returns, or exclusive investment opportunities.
Example:
“You’ve won 5 ETH! Click here to claim your prize!”
Why It Works:
The promise of easy money overrides skepticism and rational thinking.
How to Counter:
Scammers dangle fake giveaways or guaranteed profits to hook victims.
– If an offer seems too good to be true, it probably is.
– Verify all giveaway claims through official project channels.
Cross-reference:
Fake Giveaway Scams (Ch. 3) explains how scammers promote fake rewards.
Educational Note:
Scammers often use fake groups and offer large rewards to lure victims.
This is a Mobile App crypto scam, attempting to lure victims with the promise of easy rewards while establishing trust through a fake community.
Here’s how you can identify it as fraudulent:
– Unrealistic Promises: Claims that members have a chance to win a $100,000 prize, a common tactic used in scams to attract victims.
– Fake Community Setup: Keeps the group in silent mode and claims it’s still in preparation, which prevents users from verifying legitimacy through discussion.
– Psychological Manipulation: Encourages users to stay engaged and trust the group, making them more susceptible to future scams, such as fake investment opportunities or phishing attempts.
4. Feigning Transparency and False Security
Some phishing emails pretend to be security alerts to trick users into exposing their credentials.
👁️ Example:
“Your wallet is under attack! Secure it now by logging in.”
🔥 Why It Works:
Victims believe they are protecting their assets, but they hand over credentials.
🛡️ How to Counter:
Trust your platform, not the message.
– Legitimate companies NEVER ask for sensitive information via email.
– Verify security alerts by checking directly in your exchange/wallet account.
5. Using Social Proof and Fake Testimonials
Attackers fabricate fake reviews, testimonials, and engagement to make their scams look widely accepted and legitimate.
Example:
“Thousands of users have already doubled their investments with this opportunity!”
Why It Works:
People are influenced by the actions of others, making them more likely to trust the scam.
How to Counter:
Do your due diligence—never rely on likes or testimonials alone.
– Be skeptical of overly positive claims.
– Verify sources independently before trusting an offer.
6. Exploiting Familiarity, Personalization, and Mimicry
Scammers personalize phishing emails using leaked user data, making them appear more credible.
Example:
An email addresses you by name and references a recent transaction, making it look like an authentic exchange notification.
Why It Works:
Victims feel comfortable with familiar branding and messaging, lowering skepticism.
How to Counter:
Always verify sender identity—even if the message seems legitimate.
– Double-check URLs even if the email contains correct personal details.
– Verify the sender’s identity before engaging.
7. Targeting Inexperienced Users
Scammers exploit new crypto users who may be unfamiliar with phishing tactics.
👁️ Example:
A new user receives an email claiming they must “verify” their wallet or risk losing access.
🔥 Why It Works:
Lack of experience makes users more likely to believe false claims.
🛡️ How to Counter:
Start with a foundation of crypto safety.
– Learn security best practices before making crypto transactions.
– Use official exchange/wallet guides to verify account security steps.
8. Creating False Scarcity and Hype
Scammers pressure victims to act quickly, claiming that an opportunity is “limited” or “time sensitive.”
Example:
“Only the first 100 people will receive this exclusive airdrop! Act fast!”
Why It Works:
The fear of missing out (FOMO) overrides logical decision-making.
How to Counter:
If you feel rushed, step back—it’s probably a scam.
– Take time to verify legitimacy—real opportunities don’t require rushing.
– Be skeptical of airdrop offers that require login credentials or wallet approvals.
Cross-reference:
Pump & Dump Schemes (Ch. 9) also use urgency tactics.
9. Multi-Stage Phishing Attacks (Advanced Persistent Phishing)
Some phishing scams do not steal credentials immediately but instead collect partial data over multiple interactions.
Example:
A user receives an email warning of suspicious activity and later gets a fake “customer support” call asking for additional verification details.
Why It Works:
The gradual collection of data builds trust before executing the scam.
How to Counter:
Be wary of continuity between suspicious emails and follow-up contact.
– Be wary of follow-up calls or messages after a suspicious email.
– Verify account activity within your exchange/wallet settings instead of relying on external messages.
Cross-reference:
Fake Customer Support Scams (Ch. 3) involve social engineering but may begin as phishing attacks.
Practical Example: How to Identify Phishing Emails
Below are three real email examples, one or more of which are phishing attempts designed to steal user credentials and gain access to accounts.
Review them carefully and evaluate them carefully to identify which emails are legitimate and which are malicious.
✉️ Email 1: Apple Notification – App Download
This email notifies the recipient of a new application downloaded using their Apple account.
The email includes two links, one of which directs the user to change their account password.
✉️ Email 2: Microsoft Notification – New Apps
This email informs the recipient that a new application has been connected to their account.
The email includes one link to access the recipient’s account and manage the apps.
✉️ Email 3: Microsoft Notification – New User Agreement
This email informs the recipient that a new Microsoft user agreement is ready to be reviewed and confirmed.
The email includes one link to access the user agreement and confirm the user’s information.
Please carefully review all three emails before determining which are legitimate and which are phishing attempts. Take your time to assess the details and identify any red flags.
.
..
…
….
…..
Before moving on, think about the last time you received an unexpected email. Did you check the sender’s details?
Results
Out of the three emails, only Email 3 was identified as a phishing scam.
Phishing emails can often be identified by carefully examining the sender’s details and formatting. In this case, two key red flags stood out:
– The word Microsoft appears as M̶icrosoft with an unusual formatting issue.
– The sender’s domain, repectemesdatas.fr, has no connection to Microsoft.
The fake Microsoft user agreement update email employs several phishing techniques to deceive recipients:
You might be wondering: How can I be sure that Email 1 and Email 2 are legitimate and not phishing attempts?
The answer is simple: Don’t trust, verify.
For both Microsoft and Apple accounts, avoid clicking on links in the email. Instead, visit their official websites directly to verify the information and manage your account securely.
How to Respond to a Phishing Scam
Even the most security-conscious individuals can fall victim to a well-executed scam.
Phishing scams, like many crypto scams, are constantly evolving, making it impossible to guarantee 100% protection.
However, the good news is that being scammed doesn’t have to mean complete financial or reputational ruin.
By taking proactive security measures now, you can minimize the impact if you ever fall for a phishing scam.
Additionally, knowing the right steps to take after an attack can help you limit damage, recover assets where possible, and prevent future incidents.
Immediate Actions to Take After Falling for a Phishing Scam
If you’ve fallen for a scam, the first few hours are crucial in determining how much damage can be prevented. Take these actions immediately:
1. Revoke Any Unauthorized Wallet Permissions
If you connected your wallet to a malicious site, it may still have permission to access your assets.
Action Plan:
– Open your wallet’s permission settings or use a trusted revocation tool.
– Review all active token approvals.
– Revoke access for suspicious or unknown smart contracts.
Why It Works:
Revoking access prevents scammers from making further withdrawals or token transfers through your wallet.
2. Secure Your Exchange and Wallet Accounts
If credentials are exposed, scammers might try to log in to your accounts.
Action Plan:
– Change passwords for all affected accounts.
– Enable hardware or app-based 2FA (e.g., Authy, Google Authenticator).
– Check email filters for forwarding rules or suspicious logins.
Why It Works:
Cuts off access for attackers and secures your critical accounts from takeover.
3. Freeze or Move Your Crypto Assets
If you suspect your wallet has been compromised, act fast.
Action Plan:
– Transfer remaining funds to a new, secure wallet.
– If funds were on an exchange, contact support and request a withdrawal freeze.
– Use a hardware wallet for future storage.
Why It Works:
Limits the scammer’s ability to steal any remaining assets.
4. Check for Unauthorized Transactions
Understanding what was accessed or stolen can aid in recovery and reporting.
Action Plan:
– Use a blockchain explorer (e.g., Etherscan for Ethereum, BSCScan for BNB Chain).
– Look for suspicious approvals, token drains, or NFT transfers.
– Save the transaction hashes as evidence.
Why It Works:
Provides a clear trail of the attack and documentation for investigators or recovery services.
5. Report the Scam to Relevant Authorities
Don’t just absorb the loss—speak up.
Action Plan:
– Notify the support teams of any affected platforms.
– Report the incident to blockchain security firms like Chainalysis, CipherTrace, or MistTrack.
– File a report with cybercrime units like the FBI IC3, Europol, or your local agency.
Why It Works:
While not all crypto is recoverable, timely reports can freeze assets or help trace them.
6. Warn Your Network
If phishing involves impersonation or social engineering, others may be targeted next.
Action Plan:
– Notify your contacts (via email, Telegram, Discord, etc.).
– Share a warning in relevant crypto groups or forums.
– If the phishing link is still live, report it to anti-phishing services or the platform host.
Why It Works:
Helps protect your network and reputation, and disrupts the scam’s reach.
Top Tips to Protect Yourself from Phishing Scams
Being phished can feel like a setback, but it’s also a moment to reassess and come back stronger.
The recommendations that follow are designed to patch the vulnerabilities that were exposed, and more importantly, to help you build a safer, more resilient security posture moving forward.
While it’s always best to put these measures in place beforehand, applying them now can stop the next attack before it starts.
1. Invest in a Hardware Wallet
Move critical funds offline for maximum security.
Action Plan:
– Store large balances and long-term assets in a hardware wallet.
– Avoid keeping significant funds in browser-based or mobile wallets.
– Use the hardware wallet for receiving and sending only when necessary.
Why It Works:
Hardware wallets keep private keys offline, making them immune to most phishing attacks.
2. Set Up Stronger Account Security
Lock down your accounts to prevent credential reuse or takeover.
Action Plan:
– Use a password manager to generate and store unique, strong passwords for each account.
– Enable app-based 2FA (avoid SMS-based authentication) or a hardware security key.
– If your email was compromised, create a new secure email for crypto-related accounts.
Why It Works:
Reduces the risk of repeated hacks through stolen credentials.
3. Diversify Crypto Holdings & Backups
Don’t keep all your assets in one basket—or one backup.
Action Plan:
– Don’t store all assets in one wallet, use separate wallets for daily transactions and long-term holdings.
– Secure your seed phrase backups in multiple offline locations (e.g., metal backup plates, secure storage).
🔥Why It Works:
Even if one wallet is compromised, your entire portfolio won’t be lost.
4. Monitor for Further Breaches
Catch unauthorized activity early before more damage is done.
Action Plan:
– Check if your credentials were leaked in past data breaches via sites like Have I Been Pwned.
– Set up real-time alerts for large transactions using blockchain tracking tools (Etherscan, Nansen, etc.).
– Review connected dApps and smart contract approvals regularly.
Why It Works:
Early detection can prevent further loss if attackers attempt to use stolen data later.
5. Educate Yourself and Stay Updated
Knowledge is your most reliable firewall.
Action Plan:
– Follow trusted sources for crypto security news.
– Join reputable crypto security communities to stay ahead of emerging scam tactics.
– Subscribe to alerts or newsletters that track phishing threats in real time.
🔥 Why It Works:
Scammers constantly evolve their methods—staying informed is your best defense.
6. Use Security Extensions & Anti-Phishing Tools
Add browser-level protection to catch scams before they load.
Action Plan:
– Install browser security tools like Wallet Guard, MetaMask Phishing Detector, or Cloudflare 1.1.1.1 to block malicious sites.
– Enable DNS protection to prevent access to known phishing domains.
– Use safe browsing features in Chrome, Brave, or Firefox.
🔥 Why It Works:
Adds extra layers of security to prevent future phishing attempts.
7. Psychological Recovery: Learn Without Blame
Emotional recovery is just as important as the technical one.
Action Plan:
– Understand that falling for a scam doesn’t mean you’re foolish. Scammers are professionals at deception.
– Avoid hasty “revenge investing” (trying to win back lost funds quickly through risky schemes).
– Share your experience with trusted communities to help others avoid similar scams.
🔥 Why It Works:
Acknowledging the scam and moving forward helps prevent repeat victimization.
Explore More
Are you still looking for more information about phishing scams?
Here are some additional resources that can help you stay informed and secure in the crypto and Web3.
Recommended Blog Posts about Phishing Scams
Explore key blog posts about Phishing Scams that offer practical tips on crypto safety, scam detection, wallet protection, and Web3 fraud prevention.
Merkle Science | Weaponized Influence: Social Engineering in Crypto Scams
Crypto and Web3 Phishing Scams – Frequently Asked Questions
Phishing scams remain a top security threat in the crypto and Web3 ecosystem, often targeting users through fake messages, cloned websites, or deceptive prompts to steal sensitive information.
Here are some of the most common questions people ask as they try to recognize phishing tactics and avoid falling victim to them.
A phishing scam is a fake message, website, or alert that impersonates a trusted crypto platform to trick users into revealing wallet credentials, seed phrases, or authorizing harmful transactions.
Look for:
• Urgent or threatening language
• Misspelled domains (e.g., coínbase.com)
• Suspicious links or poor formatting
Always verify by visiting the platform directly—don’t click links.
If you connected a wallet or entered credentials:
• Revoke token approvals
• Change passwords and secure accounts
• Move funds to a safe wallet
Crypto transactions are irreversible, but you can:
• Freeze exchange accounts
• Report to platforms and blockchain security firms (Chainalysis, MistTrack)
• File with cybercrime authorities (FBI IC3, Action Fraud UK)
Clone sites mimic real crypto platforms with minor URL changes (e.g., binanсе.com) to steal credentials.
Avoid by:
• Bookmarking official sites
• Verifying SSL and spelling
• Using anti-phishing browser tools
Spear phishing is targeted — scammers use your real info (e.g., name, wallet activity) to create convincing fake alerts.
General phishing is broader and less personalized.
Vishing is voice phishing. Scammers impersonate support staff on calls and pressure you to reveal login info or approve transactions.
Always hang up and verify directly through official channels.
• Anti-phishing browser extensions (MetaMask Detector, Wallet Guard)
• DNS protection (Cloudflare 1.1.1.1)
• Wallet approval managers (Revoke.cash, Etherscan)
Yes. Scammers can embed fake QR codes or replace clipboard addresses (address poisoning).
Always verify the first and last characters of wallet addresses before sending.
• Don’t click links in crypto-related texts
• Use app-based 2FA instead of SMS
• Filter spam and enable reporting features in your phone settings
Is there anything that you would like to tell us:
– Is there any other topic of your interest that we should cover?
– Is there something we should be aware of?
Please fill out the form below or send us an email to feedback@cryptosafetyfirst.com
