How to stay safe on Solana
Most losses in crypto come from social engineering, not from broken blockchains. Slow down here – it pays off. If you are new to Solana, read the basics first.
Your seed phrase is the master key
- Never type it into a website, Telegram bot, or “support” form.
- Never screenshot it or store it in cloud notes.
- Legitimate apps will never ask you to paste it to “verify” or “sync” your wallet.
- If someone has your seed phrase, they own your funds – recovery is usually impossible.
Common scam patterns
- DMs promising free SOL or NFTs – especially on Discord, X, or Telegram.
- Fake support – “we noticed unusual activity, connect your wallet here.”
- Too-good APY – guaranteed high returns are a red flag; real staking yields change and carry risk.
- Urgency – “act in 10 minutes or lose access.” Real tools do not pressure you like that.
- Unknown apps – read what you sign; malicious transactions can drain approved tokens.
If you did not seek out the link yourself, treat it as hostile. Open official sites by typing the URL or using bookmarks you trust.
Verify before you trust
- Cross-check validator or project names on multiple sources.
- Use explorers (e.g. Solscan, Solana Beach) to inspect addresses – not pretty landing pages alone.
- Assess validators with open tools – e.g. the Validator Transparency Dashboard or our assessment guide – before delegating.
If something already went wrong
Mistakes happen to careful people too. What matters is the next ten minutes:
- Shared your seed phrase? Create a brand-new wallet with a new phrase and move everything you can, immediately. The old wallet is compromised forever – never reuse that phrase.
- Signed something suspicious? Move remaining funds to a fresh wallet, then review and revoke token approvals with a reputable tool before using the old address again.
- Sent funds to a scammer? On-chain transfers are final – no support line can reverse them. Document what happened, warn the community where it occurred, and treat it as paid tuition.
- Received strange tokens or NFTs? Just leave them. Interacting with unknown airdrops is how many drains start – ignoring them costs nothing.
Frequently asked questions
What should I do if I shared my seed phrase?
Create a new wallet with a new seed phrase and move everything you can – the compromised wallet can be emptied at any moment. Never reuse the old phrase, even "temporarily."
How do I recognize a Solana scam?
Unsolicited DMs with free SOL, "support" asking to verify your wallet, guaranteed APY, countdown timers. Real tools never ask for your seed phrase and never rush you.
Is it safe to connect my wallet to a website?
Connecting is usually low-risk; the danger lives in what you sign afterwards. Only connect to sites you found yourself, read every transaction, and keep a separate small wallet for experiments.
What this guide will never do
We will not ask for your keys, promise returns, or tell you to stake today. Education first; actions are always your choice. New words tripping you up? The Solana glossary explains them all in one sentence each.