Don't get scammed
The fastest-growing risk in crypto isn't the market — it's fraud, phishing and AI-powered impersonation. Check a link before you trust it, and learn the red flags.
Crypto Scam & Phishing Checker
Paste a site or link before you connect a wallet or enter anything. We check it against open threat feeds (OpenPhish, URLhaus) and known phishing patterns.
This is an educational safety aid, not a security audit. A “clean” result does not mean a site is safe. Never share your seed phrase, and never approve wallet transactions you don't understand.
AI deepfake & impersonation scams
AI can now clone a voice from seconds of audio and fake a live video call. Scammers use it for “celebrity giveaway” streams, fake executives, and bogus support. Here's how to spot them.
Red flags
- A celebrity or CEO “livestream” promising to double any crypto you send — always a scam, even if the video looks real.
- Urgency and scarcity: “only for the next 10 minutes,” “limited spots.” Pressure is the tell.
- A video call where the face looks slightly off, lip-sync lags, or lighting is strange — it may be a real-time deepfake.
- A voice message from a “friend” or “exec” asking for crypto or login help — voice cloning needs only seconds of audio.
- Any request to send funds first to “verify” or “unlock” a bigger payout.
How to verify
- Treat any “send crypto to receive more” offer as fraud, 100% of the time.
- Verify on a second channel you already trust — call the person back on a known number.
- Ask a real-time question only the real person would know during a video call.
- Check the official website and verified accounts directly — never via the link in the message.
Metaverse & Web3 safety
Owning assets in the metaverse and Web3 means you are your own bank — which means you are also your own security team. A few rules prevent almost all losses.
Your seed phrase / recovery words unlock everything. Never type them into any website, app, or “support” chat — ever.
“Wallet drainers” are fake mint, airdrop, or game sites that ask you to sign a transaction that grants them your tokens. Read what you’re approving.
Bookmark the real dApp URLs. Most metaverse/NFT theft starts with a look-alike domain — run it through the checker above first.
Revoke old token approvals periodically (e.g. with a reputable approval-revoke tool) so a forgotten permission can’t be abused.
Real support never DMs you first and never asks for your seed phrase or remote access.
Use a separate “burner” wallet with small funds for minting and trying new metaverse/Web3 apps.
The one rule that beats every scam
Nobodylegitimate will ever ask you to send crypto to receive more, or to share your seed phrase. Slow down, verify on a channel you trust, and when in doubt — don't.
More guides in ResourcesThe scam checker uses open threat feeds (OpenPhish, URLhaus/abuse.ch) and heuristics for general information only. A “no known threats” result is not a guarantee of safety, and this page is educational, not professional security or financial advice.