imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

imtoken

Phishing & Scam Awareness

Learn common risks including fake support, fake airdrops, impersonation domains, remote-control scams and clipboard replacement.

On this pageimpersonation websitesfake supportfake airdropsremote controlclipboard address replacement

Phishing & Scam Awareness: Learn common risks including fake support, fake airdrops, impersonation domains, remote-control scams and clipboard replacement. Wallet security is built through repeatable habits rather than a single setting. When facing a signature, approval, transfer or recovery request, protecting sensitive information and reviewing details should come before convenience.

Security principle: In Phishing & Scam Awareness, imtoken does not ask users to enter a seed phrase, private key or wallet recovery phrase.
Offline backup and private key protection

impersonation websites

Check 1

When working with impersonation websites, place the concept back into a real transaction flow. Information on screen may come from on-chain state, local wallet records or a third-party page, so verify public details such as the network, address, transaction hash or contract before deciding what to do next.

Check 2

In Phishing & Scam Awareness, the section on impersonation websites connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Phishing & Scam Awareness, for impersonation websites, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Phishing & Scam Awareness, a good outcome for impersonation websites is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

fake support

Check 1

A common mistake with fake support is drawing a conclusion from a single field. A stronger check compares the active network, destination, asset identity and on-chain record together, especially for same-named tokens, cross-network activity or DApp interactions.

Check 2

In Phishing & Scam Awareness, the section on fake support connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Phishing & Scam Awareness, for fake support, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Phishing & Scam Awareness, a good outcome for fake support is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

fake airdrops

Check 1

For fake airdrops, a useful review pattern is source, scope and result. Source explains where the request came from; scope shows what the action can affect; result is then checked through transaction records, block confirmations or approval state.

Check 2

In Phishing & Scam Awareness, the section on fake airdrops connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Phishing & Scam Awareness, for fake airdrops, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Phishing & Scam Awareness, a good outcome for fake airdrops is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

remote control

Check 1

remote control is not only a feature label; it also has a specific risk boundary. If a page conflicts with the wallet display or the request cannot be explained clearly, stop before signing, approving or transferring and verify through trusted public information.

Check 2

In Phishing & Scam Awareness, the section on remote control connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Phishing & Scam Awareness, for remote control, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Phishing & Scam Awareness, a good outcome for remote control is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

clipboard address replacement

Check 1

After completing an action involving clipboard address replacement, review the outcome again. Transaction status, approval targets, network confirmations and balance changes are stronger evidence than a page-level success message alone.

Check 2

In Phishing & Scam Awareness, the section on clipboard address replacement connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Phishing & Scam Awareness, for clipboard address replacement, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Phishing & Scam Awareness, a good outcome for clipboard address replacement is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

Important risk reminder

For Phishing & Scam Awareness, Remember: the user is responsible for safeguarding the seed phrase and private keys, and official staff will not ask for a seed phrase, private key or verification code. On-chain transactions generally cannot be reversed by a wallet alone, and third-party DApps or smart contracts may involve technical or fraud risks. Review the address, network, amount, approval target and permission scope before acting.

Related reading

Continue with imtoken

Continue from the imtoken download entry after reviewing the key checks in Phishing & Scam Awareness.

Download imtoken