Digital-asset security depends on controlling account access and cryptographic credentials. A convincing message or urgent telephone call can be as dangerous as a technical attack.
Protect authentication credentials
Use a unique password and enable supported multi-factor authentication. Never provide a one-time code to an unsolicited caller or message sender.
Access accounts through saved official addresses rather than links delivered through unexpected messages.
Protect private keys and recovery phrases
Anyone with a private key or recovery phrase may be able to control the associated assets. Legitimate support personnel should not ask you to disclose them.
Do not enter a recovery phrase into an unfamiliar website, form or remote-support tool.
Treat urgency as a warning
Fraud attempts frequently create artificial urgency involving account suspension, taxes, investment opportunities or withdrawal deadlines.
Stop, independently verify the contact and use an official support channel before taking action.
Continue your research
Review transaction-specific documents, product specifications, fees and independent professional advice before making a financial decision.
Return to Knowledge Center →