Phishing: recognizing fake support portals and wallet pop-ups

---

Bookmark official sites. Type URLs manually when in doubt. These habits outperform clever browser plugins.

Look-alike domains

Unicode homoglyphs and hyphen tricks abound. Compare URLs character by character.

What legitimate support never does

Ask for your seed phrase, remote desktop control, or “verify” by sending crypto to a new address.

Team training

Run tabletop exercises with finance and ops. Measure time-to-detect for simulated phishing.