Check first. Send later.

Most avoidable losses begin with a rushed click, a fake support message, or a recovery phrase entered in the wrong place. Use these tools before money or credentials move.

Check a website

Review a URL for visible phishing and lookalike-domain signals before clicking or logging in.

Open

Official links directory

Open a curated list of exchange, wallet, and Bitcoin-resource domains.

Open

Protect your seed phrase

Learn where a recovery phrase should — and should never — be entered.

Open

Full safety guide

Use the broader security hub for custody, 2FA, scams, and safer withdrawals.

Open

Security checklists

Print or track account, withdrawal, and seed-backup steps before taking action.

Open

Crypto website risk-signal checker

Review the visible URL for lookalike domains, hidden destinations, unusual ports, urgency wording, and other common phishing signals. The analysis runs in your browser.

Do not paste passwords, seed phrases, private keys, or recovery codes. This tool does not visit or log in to the website.

Immediate red flags

• Someone asks for your seed phrase, private key, or remote access.

• A “support agent” contacts you first in a private message.

• You must deposit more money to unlock a withdrawal.

• A guaranteed return or doubled crypto is promised.

Read an external wallet-safety reference