According to @phantom, multiple spoofed sites are mimicking the official Phantom interface and immediately prompt users to enter their seed phrase, and Phantom states it will never ask for a secret recovery phrase online, source: @phantom on X, Aug 20, 2025. @phantom advises three actions to stay safe: never enter the secret recovery phrase online, double-check the domain before clicking, and bookmark official links, source: @phantom on X, Aug 20, 2025. Traders connecting wallets to DEXs, NFT marketplaces, and airdrop pages should apply @phantom’s guidance to avoid seed-phrase capture during trade execution or approvals, source: @phantom on X, Aug 20, 2025.

According to ZachXBT, @realScamSniffer has identified the public address for the HL whale as a drainer fee receiver on the projection[.]fi phishing site as of January 2025. This address, 0x7ab8c59db7b959bb8c3481d5b9836dfbc939af21, is under scrutiny for potentially facilitating unauthorized transfers. Traders should exercise caution and verify sources to avoid phishing traps.