Attackers create fake websites and emails that look like real wallets or exchanges to trick you into entering your recovery phrase. Legitimate services never ask for your phrase.
Scammers pose as customer support on social media and in direct messages, offering to help you recover funds while actually trying to steal them.
You are told you have won free tokens and just need to connect your wallet. Connecting and signing a malicious approval drains your funds.
New projects promise huge returns, take your money, then disappear. Always research a project's team and code before investing.
Never share your recovery phrase, verify every URL, ignore unsolicited DMs, and be suspicious of guaranteed returns. If it sounds too good to be true, it is.