Scam library
Crypto wallet approval traps
A wallet prompt presented as verification gives someone permission to move your tokens.
What it looks like
Fictional example: Verify wallet ownership at example.com/wallet-check. Approve the prompt to unlock community access.
Fictional example: Complete this token migration by signing the wallet request. No transfer is required.
How it works
A page or message persuades you to approve a token allowance or sign a request you do not understand. That permission can let an attacker transfer assets without another confirmation from you. Disconnecting the website does not cancel existing token approvals.
Warning signs
- A verification step asks for permission to spend tokens.
- The prompt grants unlimited access or names an unfamiliar recipient.
- Someone tells you to ignore wallet warnings.
- The requested permission does not match the stated task.
If you got one of these
- Reject unexplained signatures and spending approvals.
- Verify the request through the project's established website and independent contacts.
- If you approved it, use your wallet provider's official guidance to revoke the affected permission.
- Never enter your recovery phrase into a verification or revocation website.
If you already paid or shared something
- Stop further approvals and revoke malicious permissions using independently verified instructions.
- If your recovery phrase was exposed, create a new wallet securely and protect remaining assets.
- Save transaction IDs and wallet addresses for ic3.gov; do not pay a stranger to recover the funds.
Who gets targeted
People using crypto wallets, token communities, decentralized apps, or digital collectibles.