Harden identity and access
Use a unique password, secure the recovery email and enable a verified authentication option where available. Never reuse one-time codes or approve an unexpected prompt.
Protect the device and browser
Install operating-system and browser updates, use a screen lock and remove unknown extensions. Avoid account access on public or shared computers.
Verify every value transfer
Recheck asset, network and address immediately before approval. Keep private keys and seed phrases offline and outside every support conversation.