Almost everything people lose comes from a short list. Learn the list once and you avoid most of it forever.
1. The seed phrase ask
Someone helpful in a chat, a “support” account, a site that wants you to “validate” your wallet. Anything that asks for your twelve words is stealing, without exception.
2. The rug pull
The creator keeps most of the supply, waits for buyers, then sells everything at once. The price goes to zero in a single block.
- Check how concentrated the holders are before buying.
- Check that liquidity isn’t trivially small compared to market cap.
- A coin minutes old with a big market cap and no liquidity is a warning, not a find.
3. The fake token
A copy with the same name and picture as something real, hoping you buy the wrong one. Always arrive via the contract address, and confirm it in two places.
4. Malicious approvals
A site asks you to sign something that isn’t a trade. It’s permission to move your tokens later. Phantom warns about many of these. If a popup appears you didn’t trigger, reject it.
5. The airdrop that costs money
Random tokens appear in your wallet. Selling them sends you to a site that drains you. Unknown tokens you didn’t buy are best left alone entirely.
A sane setup
- Keep a small wallet for trading and a separate one for anything you want to keep.
- Never connect the second one to a site you found today.
- Bookmark the sites you use, and get there from bookmarks rather than search.
- Assume anything that finds you, DM, reply, tag, is hostile until proven otherwise.