A deliberate sequence works best.
Inspect domains
A polished page or high search placement does not prove authenticity.
Refuse credential requests
Leave pages that demand a recovery phrase for verification.
Review approvals
Wallet connections and signatures require careful scope checks.
Stop when unsure
Pause activity and verify independently from a trusted device.
