Definition
Phishing is a form of social engineering. An attacker pretends to be a trusted service, colleague or project and creates a plausible reason to act. In cryptocurrency, the target may be a login password, recovery phrase, authentication code or wallet signature. Theft can occur without breaking the blockchain’s cryptography if the victim voluntarily supplies the needed authorization.
How It Works
Common delivery routes include email, messaging apps, social accounts, advertisements and imitation websites. A fake support message may ask for a seed phrase, while a fraudulent airdrop page may request a token allowance rather than a direct transfer. The visible brand, padlock icon or familiar-looking address is not sufficient proof of legitimacy. HTTPS protects a connection but does not establish that its operator is honest.
Key Considerations
Reach services through known applications or independently verified addresses and inspect the full requested action before signing. Do not share recovery secrets with support or act solely because a message creates urgency. If credentials have been entered on a suspicious site, use a trusted environment to secure the affected account and review sessions. If wallet secrets or permissions are exposed, password changes alone may be insufficient; revocation or moving assets to a new secure wallet may be necessary.