Check the source of a message
Navigate independently to the provider website instead of trusting a link in an unexpected message. A familiar logo, display name or urgent instruction does not establish who sent it.
Protect account access
Use your genuine provider documentation to review password and authentication settings. Keep recovery credentials private. We do not ask for authentication codes or a test payment to verify a wallet.
Understand wallet connections
Connecting a wallet, approving a token allowance and signing a transaction are different actions. Review exactly what the authentic wallet interface asks you to approve. Disconnecting a website may not remove every earlier permission.
If something may be compromised
Stop interacting with the suspicious page and consult genuine provider security guidance. A trusted device-security professional may be appropriate for a compromised device. We do not provide a blanket remote-desktop access route.