imtoken
What to check
01
Inspect the full context
A familiar design does not prove authenticity. Check the complete URL and whether you initiated the action.
02
Review signatures and approvals
A signature may grant permissions beyond a transfer. Reject unexpected scopes or unlimited allowances.
03
Respond quickly to warning signs
Stop interacting, disconnect suspicious sites and review approvals through trusted tools. If credentials leaked, assess asset migration from a safe device.