Phishing Recognition: 10 Most Common Scams and How to Avoid Them
Crypto scams are everywhere — phishing websites, fake support, fake airdrops, fake apps. This article lists 10 most common scams and identification methods to help you avoid 99% of pitfalls.
You receive a message: “Your account has异常 activity, please click the link to verify” — you click, and your wallet is emptied. This isn’t carelessness — the scams are too professional. This article helps you识别 10 of the most common scams.
10 Common Scams
1. Phishing Websites
Fake websites mimic official ones (like Uniswap, MetaMask) to trick you into connecting your wallet or entering your seed phrase. Identification: Check domain spelling, only get links from official channels.
2. Fake Support
On Telegram/Discord, someone私聊 you claiming to be官方 support saying “you won a prize / your account has issues.” Identification: Official support will never主动私聊 you.
3. Fake Airdrop Links
“Free XX airdrop” links that steal your authorization after connecting your wallet. Identification: Any real airdrop doesn’t require you to first pay money or enter a seed phrase.
4. Fake Apps
Fake wallet apps on App Store/Google Play. Identification: Only download from official channels, check developer info and reviews.
5. Fake Token Airdrops
Scammers send fake tokens directly to your wallet to诱骗 you into authorizing them. Identification: Never interact with unfamiliar tokens in your wallet.
6. Fake Exchanges
Fake websites mimicking知名 exchanges to trick you into registering and depositing. Identification: Only register on官方 domains, check domain spelling.
7. Fake Social Media Accounts
Twitter accounts冒充 KOLs or official accounts posting fake links. Identification: Check verification badges and account names.
8. Fake Investment Groups
Groups on Telegram claiming “teacher-guided trades” or “guaranteed returns.” Identification: Any承诺 of guaranteed returns is a scam.
9. Frontend Phishing
Replacing official websites with fake pages through DNS hijacking etc. Identification: Check contract addresses before operations.
10. Fake NFT Mints
Fake NFT project websites tricking you into connecting your wallet to mint. Identification: Only get mint links from official Twitter accounts.
3. Universal Anti-Scam Principles
- Don’t click any不明 links
- Don’t connect your wallet on非官方 websites
- Don’t enter your seed phrase on any webpage
- Don’t pay money first to “claim rewards”
- Don’t trust any “guaranteed returns”承诺
- Don’t handle any transactions in Telegram私聊
- Always get information from官方 channels
Summary
The core scam手法: Making you connect your wallet to a fake website or enter your seed phrase. The core anti-scam principle: Only use官方 channels, don’t connect to不明 websites, don’t enter seed phrases, don’t pay first. Remember these 4 rules and you can avoid 99% of scams.
Deep Technical Analysis of Phishing Attacks
Understanding phishing’s技术原理 helps you better识别 and防范:
1. Domain Deception: Scammers register domains extremely similar to官方 ones:
- metamask.io → metamsk.io (missing one ‘a’)
- uniswap.org → uniswap.xyz (different suffix)
- binance.com → binanse.com (letter substitution)
Check domains letter by letter. Mobile is especially危险 — URL bars may be hidden or shortened.
2. DNS Hijacking: Attackers hijack DNS to redirect you from the官方 website to a fake one. You输入 the correct URL but实际访问的是 a fake site.
Defense: Use DNS-over-HTTPS or DNSSEC, but this门槛太高 for普通用户. More practical: Confirm contract addresses across multiple channels before operations.
3. Browser Extension Tampering: Fake MetaMask extensions replace the real one. You connect “MetaMask” but实际 connect to a fake extension — private keys are stolen.
Defense: Only install extensions from the official Chrome Web Store page. Regularly check已安装 extensions to ensure they’re官方 versions.
4. Social Media Account Cloning: Scammers create fake accounts极其相似 to KOLs/官方:
- Real: @Uniswap (blue verification)
- Fake: @Uniswap_Official (no verification or fake badge)
Defense: Only follow accounts with blue verification badges. Never get operation links from私聊.
5. Contract Address Substitution: Fake DeFi websites use fake contract addresses. After connecting your wallet, you authorize a fake contract, not the real one.
Defense: Confirm contract addresses on官方 Twitter/Discord/GitHub before operations. Save正确的 contract addresses in a safe place.
Psychological Analysis of Phishing Attacks
Phishing isn’t just a技术问题 — it’s a心理学问题. Scammers exploit human心理弱点:
1. Urgency: “Your account is about to be frozen” / “You missed the last chance for this airdrop” → Urgency makes you来不及仔细验证 → Impulsive action → Scammed.
Counter: Any message making you “must act immediately” is可疑. Real官方 entities don’t制造 urgency to stop you from thinking.
2. Authority Trust: “From MetaMask官方” / “Gate.io support” → You trust authority → Follow without verification → Scammed.
Counter: Official support never私聊 you. Any claim of being官方 via私聊 — first confirm on官方 channels.
3. Greed: “Free 1000 USDT” / “50% investment returns” → Greed makes you ignore risks → Scammed.
Counter: There’s no free lunch. Any “free high-value” temptation is a scam.
4. Herd Mentality: “Everyone is claiming this airdrop” / “50 people in the group all succeeded” → Herd mentality makes you follow → Scammed.
Counter: Those 50 people might all be scammers扮演. Don’t follow the herd — verify independently.
Systematic Phishing Protection Plan
Build a systematic phishing protection plan rather than relying on ad-hoc判断:
1. Whitelist Mechanism: Only use官方 URLs and contract addresses you’ve verified. Save these addresses in a safe place and核对 before every operation.
2. Verification Process: For any operation requiring wallet connection, follow this process:
- Is the information source官方? (Twitter verification, Discord官方, official website)
- Is the domain correct? (Compare letter by letter)
- Does the contract address match what官方 published?
- Is there urgency? (Urgency = suspicious)
- Does it require entering a seed phrase? (Any requirement = 100% scam)
Only proceed if all 5 steps pass. Abandon if any step fails.
3. Separated Wallets:
- Main wallet: Holds large assets, never connects to any website
- Interaction wallet: Holds small funds, for DeFi operations and website connections
- Even if the interaction wallet is scammed, losses are only operational funds, not everything
4. Regular Authorization Review: Weekly review of all Approve authorizations on your wallet at Revoke.cash. Immediately撤销 unnecessary authorizations.
5. Secure Environment: Use a secure browser (avoid operating on public computers), keep OS and browser updated, install anti-phishing extensions.
Ready to start your crypto journey? Register on Gate.io with the lowest fees and complete beginner guides.
Related Articles
Can You Trade Crypto with Just 100 Yuan? 5 Iron Rules for Small-Cap Entry
Only have 100 yuan and want to try crypto trading? This isn't a joke — it's the real starting point for most retail traders. This article gives small-capital players 5 iron rules: only buy spot, never touch futures; choose low-price coins over BTC; set stop-loss lines; refuse averaging down; and record every trade — so your 100 yuan won't become zero.
Beginner Guide5 Most Common Mistakes for New Traders: Chasing Pumps, No Stop-Loss, Constant Coin-Switching, All-In, Blind Copy-Trading
The root cause of new trader losses isn't bad luck — it's repeating the same mistakes. This article breaks down 5 common errors: chasing pumps and panic-selling, no stop-losses, constantly switching coins, all-in positioning, and blind copy-trading — with specific correction methods.
Beginner Guide7-Day Action Plan: From Day 1 Account Setup to Day 7 First Trade Completed
Registered on an exchange but don't know what to do next? This article provides a 7-day practical plan — from KYC verification to fiat deposit, coin analysis, and order execution — with specific daily tasks and steps to help you complete your first trade in 7 days.
Beginner GuideAnti-Phishing Checklist: 8 Must-Check Items Before Transfers + 3 One-Click Verification Methods
Phishing scams are the top threat for crypto newcomers — one wrong transfer can wipe out your entire capital. This article provides an 8-item pre-transfer checklist and 3 one-click verification methods to help you quickly confirm safety before each operation.
Start Trading Safely on Gate.io
Low fees, 2000+ coins, and beginner-friendly tools. Join millions of traders worldwide.
Register on Gate.io →