Before you connect your wallet: a safety checklist
Ten checks that stop almost every wallet-drainer attack.
Before connecting your wallet to a site, check that you reached it yourself, that the web address is exactly right, and that you're using a wallet holding only what you need. Then read every request: connecting is harmless, but approvals, "permit" signatures and unlimited spending caps can hand your tokens to a thief. Never type a seed phrase into any site.
Legitimate support will never ask for your seed phrase (recovery phrase) or private key. Not an exchange, a wallet maker, a lawyer, the police or the FBI. Anyone who asks for it, or asks you to type it into a website, is trying to steal from you.
The checklist
Tick each step as you go. Use the print button for a paper copy to keep by your computer.
All 10 checked. If anything along the way felt wrong, trust that feeling and wait.
Your ticks are saved only in this browser, so you can come back to them. Nothing is sent anywhere.
Why these checks matter
Wallet-signature phishing took $83.85 million from 106,106 people in 2025, according to Scam Sniffer, and the single largest loss came from one "permit" signature that looked like a login. Each check above breaks one step of that attack. The full explanation is in phishing and wallet drainers.
Frequently asked questions
Is it safe to connect my wallet to a website?
Connecting itself is low-risk on a genuine site. The danger is signing an approval or permit on a fake one, so verify the site and read every request.
What should I do if I already signed something?
Move remaining funds to a new wallet right away, then revoke approvals. Follow the emergency checklist.
Where to next
Sources
- Scam Sniffer 2025 crypto phishing report (January 2026)
- Ethereum security and scam prevention (ethereum.org)
Written for beginners and checked against the sources listed. Last reviewed November 5, 2026. This page is educational and is not financial, tax or legal advice. How we write and check pages.