How it works: a fake site or "airdrop" asks you to connect your wallet and sign something. The signature isn't a harmless login — it's a token approval that hands an attacker permission to move your assets.

Stay safe:

• Read what you're signing. If a request wants approval/allowance over your tokens, stop and understand why.
• Don't connect your wallet to sites you reached from a DM, an ad, or a random link.
• Periodically review and revoke approvals you no longer use (tools like Revoke.cash).
• "Free" claims and urgent "act now" pressure are red flags.

When in doubt, don't sign. Ask here first.