Core principles for Phishing & Scams
On-chain activity is a sequence of independent decisions. A wrong network, address or permission can change the outcome, so the workflow should be understood before action. For Phishing & Scams, start with look-alike domains and fake support, then place fake airdrops inside the actual workflow. This makes the principles portable across different interfaces instead of tying understanding to one screen layout.
Before acting, identify the account in use, the target network, the asset or contract involved and the on-chain action expected to occur. When malicious links is relevant, review fee source, request details and confirmation state. When working with remote control, prefer verifiable on-chain information over a label shown by one interface.
After the action, keep enough information to check the result again, such as clipboard risks, the network name, destination address or contract address. On-chain transactions generally cannot be reversed by a wallet acting alone. Third-party DApps and smart contracts carry their own risks, and a wallet connection does not make every request trustworthy.
Using look-alike domains as an example, separate what you see into three layers: interface presentation, the wallet request, and the verifiable on-chain result. The interface explains context, the wallet request defines what will be signed or sent, and the chain records what actually happened. If those layers do not agree, stop and verify the network, address, contract or transaction state before continuing.
Risk scenarios involving look-alike domains and fake support
A wallet connects a user to blockchain networks, but it cannot make every risk decision on the user’s behalf. Critical details still need to be reviewed directly. For Phishing & Scams, start with look-alike domains and fake support, then place fake airdrops inside the actual workflow. This makes the principles portable across different interfaces instead of tying understanding to one screen layout.
Before acting, identify the account in use, the target network, the asset or contract involved and the on-chain action expected to occur. When malicious links is relevant, review fee source, request details and confirmation state. When working with remote control, prefer verifiable on-chain information over a label shown by one interface.
After the action, keep enough information to check the result again, such as clipboard risks, the network name, destination address or contract address. On-chain transactions generally cannot be reversed by a wallet acting alone. Third-party DApps and smart contracts carry their own risks, and a wallet connection does not make every request trustworthy.
Using fake support as an example, separate what you see into three layers: interface presentation, the wallet request, and the verifiable on-chain result. The interface explains context, the wallet request defines what will be signed or sent, and the chain records what actually happened. If those layers do not agree, stop and verify the network, address, contract or transaction state before continuing.
- look-alike domains
- fake support
- fake airdrops
- malicious links
- remote control
Recognizing problems with fake airdrops and malicious links
In a multi-chain environment, three recurring questions help: which network am I on, which asset or contract is involved, and what permission am I granting? For Phishing & Scams, start with look-alike domains and fake support, then place fake airdrops inside the actual workflow. This makes the principles portable across different interfaces instead of tying understanding to one screen layout.
Before acting, identify the account in use, the target network, the asset or contract involved and the on-chain action expected to occur. When malicious links is relevant, review fee source, request details and confirmation state. When working with remote control, prefer verifiable on-chain information over a label shown by one interface.
After the action, keep enough information to check the result again, such as clipboard risks, the network name, destination address or contract address. On-chain transactions generally cannot be reversed by a wallet acting alone. Third-party DApps and smart contracts carry their own risks, and a wallet connection does not make every request trustworthy.
Using fake airdrops as an example, separate what you see into three layers: interface presentation, the wallet request, and the verifiable on-chain result. The interface explains context, the wallet request defines what will be signed or sent, and the chain records what actually happened. If those layers do not agree, stop and verify the network, address, contract or transaction state before continuing.
Response steps and checks for remote control and clipboard risks
Interfaces can look similar while pointing to different networks, contracts and account permissions. Visual similarity is never enough to establish that two actions are equivalent. For Phishing & Scams, start with look-alike domains and fake support, then place fake airdrops inside the actual workflow. This makes the principles portable across different interfaces instead of tying understanding to one screen layout.
Before acting, identify the account in use, the target network, the asset or contract involved and the on-chain action expected to occur. When malicious links is relevant, review fee source, request details and confirmation state. When working with remote control, prefer verifiable on-chain information over a label shown by one interface.
After the action, keep enough information to check the result again, such as clipboard risks, the network name, destination address or contract address. On-chain transactions generally cannot be reversed by a wallet acting alone. Third-party DApps and smart contracts carry their own risks, and a wallet connection does not make every request trustworthy.
Using malicious links as an example, separate what you see into three layers: interface presentation, the wallet request, and the verifiable on-chain result. The interface explains context, the wallet request defines what will be signed or sent, and the chain records what actually happened. If those layers do not agree, stop and verify the network, address, contract or transaction state before continuing.
Security reminder
Keep your seed phrase and private key under your own control. imtoken personnel will never ask for them or for verification codes. Check the address, network and amount before transferring, and review each DApp signature or approval independently.