Recognize the pressure. Break the spell.

A familiar face is easy to copy

Scammers can copy names, avatars and websites. Unsolicited tokens or NFTs can point to a fake claim site. Do not follow links embedded in an unexpected asset or assume an account is genuine because it uses familiar branding.

Keep recovery phrases private. Be especially cautious with messages offering technical help, recovery or an urgent reward in exchange for access.

Read the source: Ethereum.org: security and scam prevention

Scams can be built into the market

A rug pull commonly describes insiders abandoning a project or extracting value, such as removing liquidity. A honeypot is a token design that lets people buy while restricting their ability to sell. A pump-and-dump uses promotion to attract buyers while others sell into the demand.

Warnings can include unexplained control over supply, restricted transfers, hidden promotion and pressure to act immediately. A scanner result, audit badge or liquidity lock cannot prove that every part of a project is safe.

Read the source: Uniswap: unsellable token scams

Use a pause that is hard to negotiate away

Close the message. Open a saved official site yourself. Compare the full domain and release information. Ask for evidence in a public, moderated channel without posting private account details. You can leave any question unanswered by the promoter and choose not to take part.

If something has gone wrong, stop interacting with the suspicious site and use your wallet provider's verified security guidance. Keep relevant transaction records privately. Be wary of anyone promising guaranteed recovery for an upfront payment.