Notice what the request is trying to make you do.

Read what the message asks you to do

An attacker can copy a trusted name, logo, voice, or face. This is impersonation. A convincing profile or video does not prove an instruction is genuine. Fake support may even refer to the problem you just posted publicly.

Now look past the identity claim. Does the message ask you to reveal recovery words, send money, sign a message, or grant spending permission? Each action gives something important to the requester.

A wallet-validation scam may ask you to “sync,” “unlock,” or “verify” a wallet by sharing recovery material. Reject that request. Use the documented process for your verified wallet only when you deliberately need recovery; do not hand secrets to a website or helper.

A fake app may collect secrets during setup. Another site may request a broad spending allowance or a signature you do not understand. No immediate fee does not mean no authority was granted.

Reach genuine support through a route you verified independently. An unexpected message is a reason to check, not proof by itself. A deadline or familiar name should never replace reading the requested action.

Keep account login, a transfer, a signature, and spending permission separate. A persuasive message may try to rush you past those differences. Follow what it would let the other party do.

A screen balance is still a claim

An investment scam may begin with weeks of conversation and trust. Later, the person introduces a platform showing large profits. A small early withdrawal may even work, encouraging a larger deposit.

When you try to leave, the platform may demand another payment for a supposed tax or unlock fee. Its screen is not independent proof that the assets exist. Sending more to release the balance can increase the loss.

Different schemes use different stories. A giveaway asks you to send money to receive more back. In a pump-and-dump, organizers promote a token to attract buyers and sell into that demand. A rug pull can remove trading funds or abuse special project controls after attracting buyers.

Ask where any promised payment comes from. Is there real activity earning money, or does it depend mainly on new participants paying in? Guaranteed high returns and unexplained rewards need serious checking.

Even a real friendship or trusted account can be exploited. A research report helps reveal missing facts, but it cannot guarantee you will detect every fraud. Check the evidence behind the balance and the request.

Check whether the destination was changed

Address poisoning places a lookalike address in transaction history, hoping you will copy it later. Clipboard malware changes an address after you copy it. Matching only the first and last few characters may miss the trick.

Get the full address from the intended recipient through a verified route. Compare it with the full destination you are approving, using a trusted device display where available. Check the asset, network, and required memo as well.

An unexpected tiny transfer or token is not an invitation to open a claim site. You do not need to follow instructions attached to something a stranger sent.

Scams often try to reduce the time between a request and your action. Urgency, rewards, threats, affection, or embarrassment can all do that. Slow down and ask an independent person for help when needed. Being targeted does not mean you are foolish.

Stop the next harmful action

If something has already happened, stop sending money and following the suspicious instructions. Keep transaction IDs, addresses, messages, and dates. Preserve the evidence without sharing recovery words or other secrets.

Contact the affected service through a route you verify independently and report to the relevant authorities where you live. What you do next depends on what was exposed.

A stolen account password calls for securing the account and recovery methods from a trusted device. An unwanted token allowance may need to be revoked. A leaked recovery phrase is different: the old keys are no longer private, so disconnecting a site or revoking one allowance does not solve it.

Do not improvise a rescue transfer on a compromised device. Automated theft can make a response harder. Follow the genuine provider’s documented process and seek suitable independent help without handing over your secrets.

Be wary of anyone promising guaranteed recovery for an upfront payment. A second scam can target someone who has just lost money. Prompt reporting may help, but recovery is uncertain. Preserve evidence and avoid making the loss larger.