Unexpected approvals or transfers
Review token approvals, connected applications and transactions you do not recognize. Small unfamiliar transactions can also be relevant.
Unfamiliar prompts
Treat urgent requests to reveal a recovery phrase, install remote-access software or sign an unclear message as high risk.
Account access changes
Unexpected password resets, new devices or disabled security controls may indicate that an associated account is exposed.
Respond safely
Move carefully from a trusted device, preserve evidence before changing account state and use only verified support channels.