Inspect the destination
Look-alike domains, shortened links, social messages and paid search placements can lead to fraudulent sites.
✓ Verify through a separate trusted channel.
Learn to identify look-alike domains, unsolicited links, malicious approvals and unexpected signing prompts, then pause and independently verify suspicious requests.
Use a trusted environment. Never share private keys or recovery phrases.
Look-alike domains, shortened links, social messages and paid search placements can lead to fraudulent sites.
Unexpected contract permissions and transaction requests are risks even when a dialog looks polished.
Countdowns, urgent prizes and requests for your phrase are reasons to abandon the flow.
Use these checks as a minimum before sensitive actions. Do not rely on a single warning message in place of your own review.
Verify the source, prepare a backup and review the installation guidance before you begin.
⬇ Download NowKeep recovery credentials private. No one should request them.