Back to glossary

Phishing

Phishing is a deceptive attempt to make a person reveal credentials, approve access, send assets, or install malicious software by impersonating trust.

Messages and websites may copy a platform’s branding, create urgency, or direct the target to a look-alike domain or fraudulent support channel. Attackers can request passwords, authentication codes, recovery phrases, wallet approvals, or remote-control access. Verifying the domain independently, using phishing-resistant authentication, and contacting support through a known route are safer than following unsolicited links or instructions before taking action.

Legitimate support should never need a password, one-time authentication code, private key, or recovery phrase.

Phishing | Ohana Capital