Phishing and Social Engineering

🔑 Key Takeaway: Phishing and social engineering bypass technical controls by targeting people — treat unexpected requests involving credentials, seeds, or urgent transfers as hostile until verified out-of-band. ⚠️ This article is a stub. Help expand it by contributing.

Until this page is written, use:

• Security Awareness — threat vectors
• Community Management for channel-specific lures
• Wallet Security for drain-and-sign patterns

Planned sections

• Common Web3 lure patterns (support impostors, fake jobs, poisoned PDFs, calendar invites)
• Verification procedures (out-of-band callbacks, dual control)
• Reporting and escalation paths into incident response
• Metrics for training effectiveness

Further Reading

• User and Team Security overview
• Security Awareness
• Incident Management