Overview
Phishing is a social-engineering attack that tricks users into revealing private keys or signing malicious transactions. It is the most common way crypto assets are stolen. Phishing targets wallets, exchanges, and dapps.
How It Works
Attackers impersonate trusted sites or messages to lure users into entering credentials or approving malicious contracts. Fake websites, airdrop scams, and lookalike addresses are common vectors. Users are often the final defense.
Why It Matters
Phishing bypasses technical security by targeting human behavior. It causes billions in losses annually. Recognizing phishing and using hardware wallets or transaction simulators are key defenses.
Related Concepts
Phishing relates to Private Keys, Seed Phrase Theft, and Approval Scams. It is countered by Security tools and user education.