Crypto Safety 101

It never stops being hard to hear about someone getting scammed. It happens to complete beginners and to people who have been in crypto for years, including the ones with large followings who really ought to know better.

The reason is simple: scams do not target ignorance, they target attention. Everyone is distracted eventually. These six rules are the ones that hold up regardless — they cost you nothing when you are wrong and save everything when you are right.

🧐 Who is reaching out?

If someone contacts you out of nowhere about an amazing opportunity, stop and ask the only question that matters: why me, and why now?

Scammers impersonate trusted names because trust is the expensive part of the con and copying a profile picture is free. The account may look exactly like a project you follow, an artist you collect, a support team or a well-known collector. Cloned names, cloned avatars, one changed character in the handle.

Unsolicited contact about money is the most reliable warning signal in crypto. Nothing else comes close.

Real opportunities are announced publicly. They do not need to find you personally, and they do not expire while you check.

💰 What is the offer?

If it sounds too good to be true, it is. Guaranteed returns, doubled funds, a free mint you did not enter for, an offer far above the floor for a piece you own, an "exclusive" allocation delivered by direct message.

You worked for what you hold. Do not risk it against a promise that only makes sense if the person offering it is a stranger being unusually generous to you specifically.

Be especially careful with the ones that require you to move first — send a fee to release a prize, pay gas to claim an airdrop, deposit to unlock a withdrawal. Money moving out before money moves in is the structure of the scam, not a detail of it.

🔗 Check the link before you click

Read the URL properly, every time. Look at the actual domain, not the display text, and not the part of the address that looks familiar. Fake sites use lookalike domains, extra words, swapped characters and unusual extensions.

• Reach important sites by typing the address yourself or using your own bookmark.
• Treat shortened links as opaque, because they are.
• Check the sender as carefully as the link — a message can look like it came from anyone.
• Never connect a wallet, or approve a signature, on a site you reached from an unexpected message.

🚫 Private DMs are a no-go

Keep conversations public and transparent for as long as you can. When someone insists on moving to private messages early, ask yourself what they gain from the audience leaving.

The answer is usually that in public, someone would recognise the pitch and say so. Transparency is not just principle here; it is a practical defence, because a room full of people spots a scam much faster than one person does.

Applied specifically to X and Discord — impersonators, fake moderators, giveaway links, privacy settings — that is Safety on X and Discord.

📚 Do your own research

Before you put money into anything, spend ten minutes on it. Who is behind it, and what have they done before? Is there a real community with real conversation, or a follower count with nothing underneath? Does the project's history predate this week?

Be skeptical rather than cynical. The goal is not to assume everything is fake, it is to be informed enough that you can tell. Ask people you already trust, and treat the answers as data rather than permission.

💡 Trust your gut

If something feels off, do not talk yourself out of it. That instinct is usually pattern recognition arriving before the explanation does.

Scams live on urgency and pressure — limited spots, ending soon, only for the first fifty, act now. Every one of those is designed to stop you doing the thing on this page. Take the time. If the opportunity cannot survive an hour of your consideration, it was never an opportunity.

🏠 What this looks like on the XRPL

The general rules above hold everywhere in crypto. On the XRP Ledger they get a few specifics attached: verify the issuer address of an NFT before you buy, check that the taxon matches the rest of its collection, read every signing request in your wallet before approving it, and be wary of any off-market deal done by direct transfer. All of that is laid out in How to Collect NFTs Safely.

The ledger itself is not the risk. It has been running since 2012, settles in three to five seconds, costs fractions of a cent, and supports NFTs natively. The risk is always a person, and people are checkable.

Stay cautious, stay informed, and give yourself permission to be slow. Then go and enjoy the good part — there is real work worth finding in Explore, and a community worth knowing at XRPL Home.