Crypto phishing gives itself away at almost the same point every time: in what the message wants from you. A genuine crypto exchange never asks for your seed phrase, never for your private key and never for the code in your authenticator app. Any email, text message or social media message that asks for one of those three is an attempted fraud, however authentic the sender and the design may look. Everything that follows is the craft of applying that one sentence reliably in daily use.

The occasion for this guide is the situation in late summer 2026. Large data losses at financial and wallet providers mean criminals no longer have to scatter their attempts blindly. They know their targets’ names, addresses, phone numbers and in some…