The 7 safety rules
Almost every crypto loss comes from the same handful of tricks. These seven rules block nearly all of them — here, and everywhere else you use crypto.
🔒 The one rule that matters most: we will NEVER
ask for your password, your sign-in (2FA) codes, your private key, or your
wallet seed phrase. Nobody legitimate ever will.
- Your seed phrase is sacred. The 12 or 24 words that back up your wallet are the wallet. Write them on paper, store the paper somewhere private, and never type them into a website, photograph them, or share them — with anyone, for any reason. If you lose them, nobody can recover your wallet. If someone else gets them, they can take everything in it.
- Nobody needs your password or 2FA code. Not support, not an "admin", not us. Anyone asking for a password or a sign-in code is trying to get into your account. Real support teams can see what they need without ever asking.
- Official sites and apps only. Type the address yourself or use your own bookmarks. Download wallet apps from official app-store listings; buy hardware wallets from the manufacturer, never a reseller. Phishing sites copy real ones almost perfectly — the address bar is the tell, so check it every time.
- Send a small test first. New address, new wallet, or a large amount? Send a tiny test payment, confirm it arrived, then send the rest. Crypto payments cannot be reversed, so the small network fee on a test is cheap insurance.
- Check the address — first 6, last 6. Some malware quietly swaps a copied wallet address for a thief's. Before you press send, compare the first 6 and last 6 characters on screen against the source you copied from.
- Slow down — urgency is the scam. "Act now", "your account will be closed", "send 1 to get 2 back", guaranteed profits: all red flags. Real businesses do not rush you, and nobody can guarantee crypto returns. When in doubt, stop and ask us through a contact route you already know — not through links in the suspicious message.
- Keep your recovery offline, and tell one trusted person where it is. Seed phrase on paper (or a metal backup), stored somewhere private — never in email, photos, screenshots or cloud notes, all of which can be hacked or synced somewhere you did not expect.
If something already feels wrong
Stop mid-step — a half-finished setup is harmless; a finished scam is not. If you think you shared a seed phrase or password, treat that wallet or account as compromised: move any funds to a brand-new wallet you create yourself, change the password, and re-do 2FA. Then follow the steps in setting up a wallet fresh, and re-read this page before you move anything back.
Education, not financial advice.