Every day, thousands of people fall for fake messages like this and share their personal information with scammers, putting their crypto and security at risk.

The reality is online scams are only becoming more common, so it pays to get familiar with the most common types and how to avoid them:

1. Never share your private keys.

No crypto company, NFT project, or Twitter personality should ever ask for your password, personal information, or private key. Ever.

2. Check website URLs.

Scammers will often build convincing “lookalike” websites at “.org” or “.xyz” domains that trick people into inputting their login credentials or personal information.

3. Keep passwords private.

Avoid taking screenshots of your private key, reusing passwords, or storing recovery phrases in obvious places–like on your desktop.

Read more in week 2 of our Back-to-Basics series to learn about the most common security threats and scams.