How to Spot a Phishing Website

Always check a website carefully before you follow a link. Here is what to look out for before you open a site:

Mistakes in the web address

• Extra letters or swapped characters (for example, metamask.io → metamásk.io or metamaskl.io).
• Use of subdomains (for example, login.metamask.io.fake-site.com is a fake site).

No HTTPS

Check for the padlock in the address bar. The padlock alone does not guarantee a site is safe, but it is a must-have first line of protection.

Mistakes in the text

• Grammar mistakes, odd turns of phrase and unnatural language on the site.

Pressure to act urgently

Messages like “Your account has been blocked” or “Confirm your details immediately” are a sign of phishing.

Requests for private data

Official wallets never ask you to enter your seed phrase or private key on a regular login page.