How do I protect my seed phrase?

Write it offline, store safely, never share it or upload it to the cloud.

How to avoid phishing?

Verify domain/HTTPS and official sources; beware urgency and key requests.

When should I use a hardware wallet?

When the amount is meaningful; combine it with minimal permissions.

What if I signed something suspicious?

Revoke allowances, move funds to a clean wallet, and review permissions/sessions.

Is it safe to sign any transaction?

No. Read the message and review contract/permissions before signing.

Avoid crypto scams: red flags, on-chain checks and blacklists

The crypto world offers opportunities, but also traps. How do you avoid falling for rugpulls or slick phishing attacks?

TL;DR

✅ Spot red flags like unrealistic promises.
✅ Verify contracts and projects on-chain.
✅ Check blacklists for malicious tokens.
⚠️ Never trust unsolicited “support” contacts.

Context

Crypto scams are evolving quickly. Learning to identify them early can save you from major losses.

Prerequisites

Know how your wallet works and where to review approvals.
Access to explorers like [BscScan](https://bscscan.com).
Keep your passwords and seed phrase offline and secure.

Step by step

**Check the promise**: if it sounds too good, it probably is.
**Verify the source**: confirm URLs from official sites, not private messages.
**Do on-chain checks**: look up the contract on BscScan. 💡 Few transactions or repetitive wallets are warning signs.
**Consult blacklists**: search the token in community security pages.
**Protect your wallet**: use hardware wallets and separate a “hot” wallet for tests from your “cold” wallet for savings.

Security checklist

⚠️ Never share your seed phrase.
⚠️ Double-check URLs before interacting.
⚠️ Revoke unused token approvals.
⚠️ Test with small amounts first.
⚠️ Enable 2FA in your Binance account.
⚠️ Ignore direct messages in Telegram or Discord.
⚠️ Secure your email with strong passwords.

Common mistakes and how to avoid them

**Accepting help from strangers** → stolen funds. Prevention: ignore unsolicited contacts.
**Trusting fake screenshots or testimonials** → manipulation. Prevention: rely on verifiable on-chain data.
**Signing without reading approvals** → draining contracts. Prevention: review every approval carefully.

Practical example

You’re offered a “XYZ” token with huge returns: - Find the contract on the official website. - Compare it on BscScan and confirm it matches. - If liquidity isn’t locked, you walk away.

Quick comparisons

**Hot wallet**: convenient, but riskier.
**Cold wallet**: safer, but less handy.

Editorial note

Excitement should never replace verification. Discipline is your shield against fraud.

Next step

Read [Crypto security essentials](/en/guides/security) to strengthen your defenses.

Results / Conclusion

Scams won’t vanish, but you can learn to spot them and stay safe. The secret: distrust first, verify always.