imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

imtoken

Phishing & Scams

Recognize fake support, fake airdrops, spoofed websites, clipboard tampering and remote-control scams.

On this page

Understand Fake support first

Phishing & Scams does not stand alone; account control, network state, confirmations and third-party interactions all shape the workflow. Fake support tells you what is being reviewed now, while Fake airdrops and Spoofed domains provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Phishing & Scams workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Fake support, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Fake support, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Fake support relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

How Fake airdrops changes the workflow

To understand Fake airdrops, place it back inside the full Phishing & Scams workflow. Fake airdrops tells you what is being reviewed now, while Spoofed domains and Clipboard risk provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Phishing & Scams workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Fake airdrops, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Fake airdrops, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Fake support relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

Build a review sequence around Spoofed domains

To understand Spoofed domains, place it back inside the full Phishing & Scams workflow. Spoofed domains tells you what is being reviewed now, while Clipboard risk and Remote control provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Phishing & Scams workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Spoofed domains, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Spoofed domains, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Fake support relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

Risks and common mistakes involving Clipboard risk

To understand Clipboard risk, place it back inside the full Phishing & Scams workflow. Clipboard risk tells you what is being reviewed now, while Remote control and Fake support provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Phishing & Scams workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Clipboard risk, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Clipboard risk, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Fake support relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

Turn Remote control into a repeatable habit

To understand Remote control, place it back inside the full Phishing & Scams workflow. Remote control tells you what is being reviewed now, while Fake support and Fake airdrops provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Phishing & Scams workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Remote control, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Remote control, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Fake support relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.
Security principle: Users remain responsible for their seed phrases and private keys. imtoken will never ask for a seed phrase, private key or verification code. Third-party DApps and smart contracts can carry risk, so review each signature and approval separately.

Related reading

Ready to use imtoken?

All download actions go through the dedicated download page.

Download imtoken