Before connecting
Reach the campaign from a bookmarked official domain. Confirm the network, dates, asset contract and eligibility terms. Ignore direct messages, search ads, replies and URLs embedded in unsolicited tokens.
- Use a dedicated activity wallet
- Move unrelated high-value assets away
- Update wallet, browser and device
- Record the official domain and support route
Before signing
Read the decoded transaction or message. Identify every token, approval, operator permission, destination address and spend limit. Reject requests for a seed phrase, private key, two-factor code, remote access or a manual payment to support.
After claiming
Save the transaction hash, token contract, quantity, timestamp and value evidence. Review new permissions and revoke those that are no longer needed from a trusted interface.
If something looks wrong
Stop signing, review the transaction on a trusted explorer, move unaffected assets to a fresh wallet when safe, revoke dangerous approvals, rotate related credentials and preserve evidence.
Avoid recovery scams
People who report a loss are often contacted by impersonated security firms. Do not pay strangers who promise to reverse a blockchain transaction or request another wallet signature.
