1. Bookmark official sites. Never click links from emails/DMs — type the URL or use your bookmark.
2. Check the URL carefully. Look for extra letters, hyphens, or different TLDs (.net instead of .com).
3. Verify SSL certificate. Legitimate exchanges use Extended Validation certificates.
4. Never enter seed phrase on a website. No legitimate wallet or exchange EVER asks for your 12/24-word seed phrase online.
5. Use a hardware wallet. Physical confirmation prevents malicious contract approvals.
6. Check domain age. Phishing sites are typically registered within days/weeks of a campaign.