imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Phishing & Scams

Phishing often relies on look-alike domains, fake support, unsolicited rewards and urgency. When a request feels inconsistent, stop the action and verify through an independent route before signing anything.

On-chain verificationSecurity guidanceNo wallet secrets requested

Phishing often begins with look-alike domains

Phishing often begins with look-alike domains is part of the risk-control process for phishing & scams. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For phishing & scams, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, phishing often begins with look-alike domains also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Fake support asks for sensitive information

Fake support asks for sensitive information is part of the risk-control process for phishing & scams. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For phishing & scams, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, fake support asks for sensitive information also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Clipboard malware can replace addresses

Clipboard malware can replace addresses is part of the risk-control process for phishing & scams. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For phishing & scams, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, clipboard malware can replace addresses also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Urgency and reward claims deserve caution

Urgency and reward claims deserve caution is part of the risk-control process for phishing & scams. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For phishing & scams, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, urgency and reward claims deserve caution also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Important risk context

Seed phrases and private keys remain under user control. Official personnel will not ask for seed phrases, private keys or verification codes. Verify address, network and amount before transfers. Confirmed on-chain transactions generally cannot be reversed by a wallet, and third-party DApps or smart contracts can carry risk.

Continue with imtoken

Use the download page when you are ready, or continue through the related guides first.

Download imtoken