How it works
Attackers may clone wallet or exchange websites, send fake support messages or create links that request a signature instead of a normal login.
What to check
Open important services from saved official links, inspect domains carefully and understand what a wallet signature or approval will authorize.
- Check domains carefully
- Read wallet prompts
- Avoid links from unsolicited messages
Limits and risks
A hardware wallet cannot protect a user who deliberately signs a malicious transaction. Transaction understanding is a key part of security.
Primary sources
Bitcoin Developer Reference↗Ethereum developer documentation↗FATF: Virtual Assets↗General information only. Investment products can lose value, and terms, fees and regulation can change.