Home / Updates / Read every signing prompt before you click
Read every signing prompt before you click
A wallet drainer usually does not need your seed phrase, because a plausible-looking signature can get your own wallet to authorize the theft.
Written by John AlewineReviewed by the Crypto Guidance team
Published ยท Updated
A wallet drainer usually does not need your seed phrase. It gets your own wallet to authorize the theft, one plausible-looking signature at a time.
The setup is simple. You land on a bait site: a fake mint, a fake airdrop claim, a fake support portal. The site requests a signature or a token approval dressed up as "verify wallet" or "claim." What you actually sign grants spending rights or executes transfers. Signatures and approvals drain wallets that never revealed a secret.
My rule is short. If the wallet cannot tell you plainly what a signature does, decline.
Some people paste a signing prompt into an AI chatbot and ask what it means. Treat the answer as a starting point, then go back to the wallet. The decision stays with you and the wallet screen in front of you.
At every signing prompt
- Slow down. Urgency is the tell.
- Read what the wallet says the signature does.
- Decline anything you cannot explain in plain words.
- Close any site that pushes "verify" or "claim" from a link you did not go looking for.
The full habits live on the Security page. If you want a second set of eyes before anything irreversible, that is what consulting is for.