What is a phishing site?
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 5 min
In short
A phishing site is a copy of an exchange or wallet site, built to collect your login details or get you to connect a wallet. You cannot tell by looking, so judge by the URL and by how you arrived. The habit that helps most is opening these sites from your own bookmarks rather than from search results or adverts.
Key points
- A convincing copy built to harvest credentials or signatures
- Appearance proves nothing — judge the URL and the route
- Search adverts are a common way people land there
- Opening only from your own bookmarks is the strongest habit
Definition
A counterfeit website imitating an exchange, wallet or DeFi service, built to capture login credentials or to obtain a wallet connection and signature that lets the operator take your assets.
Fake sites are copies of the real interface — logo, colours, wording, even language options. Comparing screens tells you nothing. The domain is chosen to be easy to miss: one character off, an alternative spelling, or the same name under a different top-level domain.
People usually arrive through a sponsored search result, a social post or reply, a link dropped in a community chat, or an email. The recurring pattern is a message from an account styled to look official, telling you to log in again because of maintenance or a security update.
The site wants one of two things. An exchange clone wants your password and your two-factor code. A wallet-connect page wants a signature: connecting alone does nothing, and the request that follows is what grants power over your funds. Never approve a signature whose contents you cannot read.
Above all, hold to one rule: no legitimate service ever asks for your seed phrase. Not to restore a wallet, not to sync it, not for support. A field asking for those words is, by itself, conclusive proof that the site is fake.
Watch out for
- · Open exchange and wallet sites only from bookmarks you created yourself
- · Never log in via a sponsored search result or a link from chat or email
- · A field asking for your seed phrase means the site is fake — close it immediately