Practical learner resource

Crypto safety checklist

Use this before connecting a wallet, sending funds, approving a contract or responding to an urgent message.

Wallet and recovery

Recovery phrase stored offline and never photographedNo recovery phrase, private key, PIN or OTP shared with anyoneWallet app installed from an independently verified official sourceUnused token approvals reviewed and revoked

Account and device

Unique password or passkey used for every important accountStrong MFA enabled; recovery codes stored separatelyDevice, browser and wallet software updatedUnknown sessions, linked devices and extensions removed

Before every transaction

Recipient verified through a trusted channelCorrect network, asset and full destination address checkedSmall test transfer used when appropriateGas asset available and fee reviewed before signingContract, spender and approval amount understood

Messages and scams

Urgency, threats, secrecy and guaranteed outcomes treated as red flagsLinks and contact details verified independentlyWhatsApp and Telegram privacy and two-step verification reviewedTraffic fines, invoices and payment requests checked through official channelsUnexpected tokens, support DMs and recovery offers ignored and reported

If something goes wrong

Stop interacting and preserve screenshots, hashes and timestampsSecure email and financial accounts from a trusted deviceRevoke sessions and approvals; move remaining assets if keys are exposedContact the real bank, platform or authority through official channelsWatch for follow-up recovery scams

Stop rule

If the person, network, asset, address, contract permission or payment destination cannot be verified independently, do not proceed.

Educational checklist only. It cannot remove all risk and does not replace advice from a qualified security, legal, tax or financial professional.