Most crypto losses don’t start with a “hack.” They start with one rushed click.
Use this 30-second routine before you open a link, connect a wallet, or sign anything.
Step 1 — Pause (5 seconds)
Ask: “What exactly is being asked of me right now?”
- Click a link?
- Connect a wallet?
- Sign a transaction?
- Enter a seed phrase?
If it’s seed phrase: stop. Close the tab. That’s almost never legitimate.
Step 2 — Check the source (10 seconds)
- Did this come from a DM, a “support” account, or a random comment?
- Did you initiate the conversation — or did they?
Rule: If you didn’t go looking for it, don’t trust it.
Step 3 — Verify the destination (10 seconds)
Before you click:
- Hover the link (desktop) or long-press (mobile).
- Look for small tricks: extra letters, strange endings, look-alike names.
If it feels “almost right,” it’s usually wrong.
Step 4 — Wallet safety check (5 seconds)
If a site asks you to connect a wallet:
- Use a separate “interaction wallet” with small funds when possible.
- Don’t approve unlimited spending unless you understand why.
Step 5 — The NanaProof exit line (instant)
If anything feels rushed, emotional, or confusing, say:
“Not now. I’ll verify first.”
Then close the tab and come back later from a trusted path (typed URL / bookmarks).
Save this reminder
- Seed phrase stays offline. Always.
- “Support” in DMs is almost always fake.
- Pressure is a red flag. Legit systems don’t need you to panic.
Next post: Fake Support Scams — how they pull you in (and how to stop).