Glossary
Phishing
Fake sites and messages that trick you into signing a malicious transaction or revealing a key.
Crypto phishing is usually built around a fake version of a real site: a wallet pop-up, a support message on Discord, or a presale link in a group. The goal is to get you to sign a transaction that grants an attacker control of your funds, not to steal your seed phrase directly.
The modern variant is more dangerous than the old one. A malicious signature request can transfer your tokens to an address forever without ever touching your keys, so nothing looks stolen and the wallet still shows a full balance.
Practical habits: bookmark the sites you use, never connect from a link in a message, and treat any request to approve an unfamiliar contract as a loss until proven otherwise.