> ## Documentation Index
> Fetch the complete documentation index at: https://docs.jup.ag/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> These docs cover what users see and do on jup.ag, Jupiter Mobile and Jupiter Wallet.
> Universal Deposit, the GUM routes in Bridge & Swap (GUM Universal Bridge, GUM Universal Deposit) and other GUM integrations on jup.ag are built by GUM. For how they work, their full fee rules, security model and APIs, the reference is the GUM docs: start from https://docs.gum.ag/llms.txt.
> When the GUM docs and these docs differ on how a GUM product behaves on jup.ag, describe the jup.ag experience from these docs and the mechanics and fees from the GUM docs.

# Phishing attacks and social engineering

> How crypto phishing and social engineering work, from cloned sites to fake support DMs and giveaways, and the habits that keep your wallet safe.

export const GuideMeta = ({level, minutes, author, avatar, published, updated}) => <div className="jg-meta not-prose">
    <div className="jg-badges">
      <span className={`jg-level jg-level-${level.toLowerCase()}`}>{level}</span>
      {minutes ? <span className="jg-read">About {minutes} min read</span> : null}
    </div>
    <div className="jg-byline">
      <img noZoom className="jg-avatar" src={avatar} alt="" width="32" height="32" />
      <span>
        Written by <span className="jg-author">{author}</span>
        {published ? <span className="jg-origin">
            Originally published on Jupiter Academy, {published}{updated ? " · Updated for Jupiter Docs" : ""}
          </span> : null}
      </span>
    </div>
  </div>;

<GuideMeta level="Intermediate" minutes={2} author="Bryan" avatar="/images/guides/authors/bryan.webp" published="February 23, 2026" updated />

<img src="https://mintcdn.com/jupiter-support/p5FdkagPcbEGL8wN/images/guides/safety-phishing/cover.webp?fit=max&auto=format&n=p5FdkagPcbEGL8wN&q=85&s=b3c524477bea9e263420484fde4d1d8a" alt="A phone with crypto coins on a fishing hook, the cover of this lesson" width="1920" height="1080" data-path="images/guides/safety-phishing/cover.webp" />

Phishing in crypto works the way it does in banking: someone impersonates a source you trust to trick you into handing over your keys or approving a malicious action. The difference is that onchain there is no chargeback. Once a transaction is signed and confirmed, it is final.

Social engineering is the human side of phishing. A scammer builds trust first, sometimes over days or weeks, then makes a move. In crypto this happens most often in Discord, Telegram and X direct messages, where scammers pose as moderators, support staff or helpful community members.

<Frame caption="Fake support is one of the most common openings.">
  <img src="https://mintcdn.com/jupiter-support/p5FdkagPcbEGL8wN/images/guides/safety-phishing/fake-support.webp?fit=max&auto=format&n=p5FdkagPcbEGL8wN&q=85&s=7704e528ccbadae4790d0c328223ee50" alt="A masked character labeled Fake Support asks &#x22;How can I help you?&#x22; to a smiling user" width="1920" height="1080" data-path="images/guides/safety-phishing/fake-support.webp" />
</Frame>

## Common phishing attacks

* Fake websites: a copy of jup.ag or another trusted site, at an address that differs by a character or two, such as `jup-ag.com` or `jupit3r.io`. The page looks identical but is built to get your wallet's approval.
* Fake support DMs: someone offers to help after you post a question in a public channel. They send you to a fake site, or ask for your <Tooltip headline="Seed phrase" tip="Another name for a recovery phrase: a sequence of words, usually 12 or 24, that can restore access to a wallet. Must be kept secret and secure." cta="Open the glossary" href="/user-docs/guides/glossary#seed-phrase">seed phrase</Tooltip> to "troubleshoot".
* Fake giveaways: "Send 1 SOL, get 2 back", or a DM or reply asking you to "connect your wallet to claim your airdrop". Legitimate projects never ask you to send funds in order to receive funds, and real claims happen only on the project's official site.
* Offers to buy your old wallets: scammers offer SOL for old, empty wallets. You are unlikely to be paid, and the wallets can be reused in other scams, for example to make a token look popular before a <Tooltip headline="Rug pull" tip="A scam where a project's creators abandon it and run away with investors' funds. Often shortened to rug." cta="Open the glossary" href="/user-docs/guides/glossary#rug-pull">rug pull</Tooltip>.
* Impersonation accounts: X or Telegram accounts whose name and picture are nearly identical to official Jupiter accounts. They reply to your posts with urgent links.

## How to protect yourself

* Bookmark the official Jupiter sites and open them only from your bookmarks. Do not follow links from DMs or social media.
* Check the address in your browser before you connect your wallet. Look for misspellings and swapped characters.
* Remember: nobody from the Jupiter team will ever DM you first. If someone does, assume it is a scam, especially if they offer support, a giveaway or a link.
* Turn off direct messages from strangers on Discord and Telegram.
* When in doubt, open a ticket from the [Support Hub](https://support.jup.ag) or ask in a public channel of the official [Jupiter Discord](https://discord.gg/jup), never in a private thread someone else opened.
* Never type your seed phrase or private key into a website, a form or a chat. Your wallet only needs it when you import a wallet into it.

## How Jupiter Wallet helps

Jupiter Wallet adds two checks when a site asks you to sign. It flags transactions that look risky or malicious, and it filters out hidden transfers to known malicious addresses that a rogue browser extension may inject. Neither replaces checking the site and what you are approving. See [Risk warnings](/user-docs/manage/extension-wallet/security#risk-warnings) and [Transaction Protection](/user-docs/manage/extension-wallet/security#transaction-protection).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.