Staying safe: scams and risky tokens

Crypto transactions usually can't be reversed. Staying safe is mostly about slowing down before you click or sign.

Common scams

• Phishing: fake websites, emails or ads that copy a real brand to steal your seed phrase or get you to sign something. Always check the web address, and use bookmarks for sites you trust.
• Fake support: "helpers" in chats or replies who contact you first. Real support never DMs you first and never asks for your seed phrase.
• "Guaranteed" returns or giveaways: "send 1 ETH, get 2 back" is always a scam.

Risky tokens

• Honeypot: a token you can buy but can't sell, because the contract blocks selling.
• Rug pull: the team drains the money or liquidity and disappears.
• Owner powers: some contracts let the owner mint unlimited tokens or change balances.

Kryptokite shows a Token Safety badge on coins with contracts. It is automated and not advice, but it flags warning signs like these.

Before you sign

• Read what a wallet pop-up asks you to approve. Be careful with requests for unlimited token approval.
• Copy contract addresses only from official sources, never from random replies.

Key takeaways

• If it promises guaranteed profit, it is a scam.
• Check addresses and websites carefully; most attacks rely on rushing you.
• Honeypots, rug pulls and owner powers are common token risks.