This week’s safety check Official guidance reviewed Oct 26, 2026. Original publication dates appear below; a review date does not mean a new incident.
Check the full destination before connecting Type a known website address yourself, then verify the wallet prompt and the exact permissions before approving.
Official guidance and warnings 2 source-backed checks Coinbase · Published Oct 20, 2026 · Alert reviewed Oct 26, 2026 Skip crypto giveaways that ask you to send first Coinbase warns that fake giveaways may use impersonated accounts, convincing videos, livestreams, QR codes, or websites. Never send crypto to verify a wallet, claim a prize, or receive more crypto in return; verify promotions through official channels.
Read official source MetaMask · Reviewed Oct 26, 2026 · Undated official guidance Stop when your wallet flags a malicious request MetaMask says to close a site flagged as malicious without connecting your wallet or signing. For a warning, verify the website and contract through official channels. Security checks help, but do not guarantee safety.
Read official source Open Safety & Security resources Latest FTC consumer advice Crypto Safety Checklist Simple habits can prevent many common crypto mistakes and scams. Move slowly, verify independently, and protect every secret.
To print: Open the PDF, then use the print option in your PDF viewer. On iPhone or iPad, tap the browser’s Share button (square with an upward arrow), then tap Print. On a computer, select the printer icon in the PDF viewer.
What if something feels wrong? Pause. Verify. Protect. No legitimate support person needs your password, seed phrase, private key, or one-time security code. Name Date Wallet or account Next review Use a different strong password for every crypto account. A password manager can create and store long, unique passwords. Turn on two-factor authentication (2FA). Prefer an authenticator app or security key when the service supports it. Secure the email connected to your accounts. Give that email its own unique password and two-factor authentication.
Guard wallets and recovery phrases Never share your seed phrase or private key. Anyone who has it may be able to control the wallet. Keep recovery words offline and private. Avoid screenshots, email drafts, cloud notes, and text messages. Do not type recovery words into a link from a message. Use only the verified recovery process inside the official wallet.
Recognize scams and fake support Treat urgency as a warning sign. Pause when someone demands immediate action, secrecy, or payment. Verify websites and apps independently. Use a saved bookmark or type the known address instead of following an unexpected link. Ignore unsolicited support messages. Legitimate support will not ask for passwords, seed phrases, private keys, or one-time codes.
Check before every transaction Confirm the asset, network, and complete address. A correct address on the wrong network can still cause a loss. Use a small test transaction when appropriate. Confirm it arrives correctly before sending a larger amount. Read wallet connection and approval requests. Do not approve permissions you do not understand.
Protect devices and prepare Install updates from official sources. Keep phones, computers, browsers, and wallet apps current. Use a screen lock and protect notifications. Do not display account or verification details on a locked screen. Create a recovery plan. Document how trusted family can find instructions without placing secret recovery words in the plan.
Review wallet access and permissions Check which apps are connected to your wallet. Review connections through your wallet’s official settings. Remove connections you no longer recognize or use. Review token spending permissions separately. Disconnecting a site does not necessarily cancel its permission to move tokens. Use your wallet’s official guidance to check approvals. Read every permission-change request. Confirm the network, app, and spending limit before signing. Some changes require a network fee; stop if the request is unclear.
Three warnings worth knowing Address poisoning A scammer places a look-alike address in your transaction history. Never copy an address from recent activity without checking every character.
Wallet drainer A malicious site or contract asks for permission that may let it move tokens. Read every connection and approval request.
SIM swap A criminal takes control of a phone number to intercept messages. An authenticator app or security key reduces reliance on text codes.
IF SOMETHING FEELS WRONG Stop before doing anything else. Stop replying, clicking, signing, or sending. Open the service from your saved bookmark or known official app—not the suspicious message. Change exposed account passwords from a trusted device and review active sessions. Contact the provider through its independently verified support page. Crypto transactions may be irreversible. Take time to get qualified help before making another transfer.
Educational information only. This checklist cannot eliminate every risk and is not financial, legal, cybersecurity, or recovery advice.
