Phishing
In short Phishing is a scam that tricks you into revealing your seed phrase or signing a malicious transaction through fake sites, messages, or support agents.
Phishing is impersonation used to steal. The attacker poses as a wallet, exchange, project, or support person and gets you to hand over secrets or approve something you would never knowingly approve. In crypto, one successful phish can empty a wallet in seconds, and the transfers cannot be reversed.
The common setups are fake websites with lookalike domains, sponsored search ads leading to cloned dApps, direct messages from fake support staff, hacked project accounts posting a "claim" link, and airdropped tokens that point to a scam site. The goal is either your seed phrase or private key, or a signature: a token approval, a permit, or a transaction that sends your assets to a wallet drainer.
Small-token traders are frequent targets because they connect wallets to many new sites, chase airdrops and presales, and join busy chats where scammers lurk. The urgency of a launch or a limited claim window is exactly what phishers exploit. Once assets leave, there is rarely anyone to appeal to.
Never type your seed phrase into any website, form, or chat; no legitimate service asks for it. Bookmark the real sites you use and avoid clicking links from DMs, replies, or ads. Read what your wallet asks you to sign, and be suspicious of unlimited approvals or signatures you do not understand. Keep a separate burner wallet for new sites, store long-term holdings in a hardware wallet, and review and revoke old token approvals regularly.