Phishing scams trick users into providing private keys or wallet credentials through fake websites, emails, or social media messages. Scammers create identical copies of trusted platforms, deceiving users into logging in. To prevent phishing, always verify website URLs, enable two-factor authentication (2FA), and never share your seed phrase. Use official links from project websites and bookmark trusted exchanges. If an offer seems too good to be true, it likely is a scam.