SURVIVOR FIELD MANUAL · WALLET DEFENCE 005
How to Avoid Fake Token Websites and Wallet Scams
Scammers don't need to break into the bunker if you open the door for them. Verify the domain, verify the address, and read the signature prompt.
1. Verify the domain independently
Do not trust a link just because it appears in a reply, ad, DM or search result. Start from a known official channel and compare the full domain character by character. Watch for swapped letters, extra hyphens, strange subdomains and misspellings.
2. Never reveal recovery words
A legitimate support agent, moderator or token team does not need your seed phrase or private key. Anyone asking for them is trying to take control of your wallet. No exceptions, no “verification”, no undead customer service.
3. Treat airdrops and claims as hostile until verified
Unexpected tokens, NFTs and “claim reward” links can be bait. Do not visit their embedded sites or sign transactions to remove them. Verify campaigns from official sources; when unsure, ignore them.
4. Read every wallet prompt
Check the domain, requested action, token, amount and permissions. Reject transactions you cannot explain, especially unexpected approvals or messages that claim to be harmless but request broad access. Hardware wallets help protect keys, but cannot make a malicious transaction safe.
5. Separate browsing from treasury
Use a dedicated wallet for experiments and keep only the amount you can afford to lose there. Keep long-term holdings separate. Revoke permissions only using trusted tools and verify the correct network and account before acting.
6. If you clicked or signed
Stop interacting with the site. From a clean device, use your wallet provider's official guidance; move remaining assets to a new secure wallet if the secret phrase or key may be exposed. Do not pay “recovery agents” who contact you unsolicited. Save transaction IDs and report the domain to the relevant platform.