What is phishing?

Phishing is an attempt to impersonate a trusted person or service and obtain secret information, money or permission through deception. It can arrive through email, messages, advertisements or an imitation website.

For a crypto wallet, the target is not limited to a password. An attacker may seek a recovery phrase, private key or signature authorizing asset movement. Copying a wallet’s name and artwork does not establish who sent the request.

Example

A message claiming to be “wallet support” asks you to enter your 12 recovery words in a verification form to keep the account active. Matching colors and logos do not make that request legitimate: the phrase can expose the wallet’s keys. You avoid filling the form and use an independently verified official support channel instead.

Not every phishing attempt asks for a phrase. A “free reward” page can disguise a spending authorization as another action. A padlock icon or a lack of transaction fees does not prove identity or safety.

Our crypto phishing and fake-token checklist explains pre-signing checks and how to distinguish different kinds of exposure after an interaction.