Security and Risk Management

KuCoin Web3 Wallet Security Reminder: Stay Safe from Phishing Attacks

Última atualização: 13/11/2025

As Web3 adoption accelerates, scammers are becoming increasingly sophisticated.

They target users through fake websites, fake airdrops, fake messages, and fake emails, aiming to trick individuals into revealing their seed phrases, transferring assets, or signing malicious transactions.

Once compromised, funds can be stolen instantly — and permanently.

KuCoin Web3 Wallet remains committed to user safety and transparency. This article outlines the most common phishing methods, official security recommendations, and steps to take if your wallet is compromised.

1. Common Phishing Techniques

(1) Phishing Websites

Attackers frequently create websites that mimic website appearance and branding, using misleading domain names similar to real ones. These fraudulent pages prompt users to connect their wallets or input their recovery phrases.

Always verify that you are visiting the official KuCoin Web3 Wallet website:

https://www.kucoin.com/web3

Do not rely on search engines (e.g., Google) to find links.

Some phishing websites may appear as paid advertisements or top search results.

Instead, access official websites by clicking the link on their twitter profiles or saved bookmarks

(2) Fake Airdrops and Campaigns

Phishing links are often distributed via social media or messaging platforms under the guise of “limited airdrops,” “NFT mints,” or “bonus reward programs.”

These links may request wallet connections or contract signatures that grant unauthorized access to your assets.

Official events are only announced through verified KuCoin channels, including the KuCoin App and the official X (Twitter) account @KuCoin_Web3.

(3) Impersonation of Customer Support or Administrators

Fraudsters sometimes pose as KuCoin Web3 staff members or community moderators, sending direct messages that request verification steps or wallet information.

KuCoin Web3 Wallet representatives will never:

  • Initiate private messages with users.

  • Ask for your seed phrase, private key, or verification codes under any circumstances.

(4) Fake Messages and Emails

Fraudsters also send emails or direct messages pretending to be from KuCoin, instructing users to transfer assets to a “secure wallet” or to interact with malicious links.

To avoid falling for these scams:

  • Be cautious of any message or email requesting transfers or urgent actions.

  • Set up your KuCoin Anti-Phishing Code to verify that emails truly originate from KuCoin. This feature helps you recognize authentic communication from official KuCoin domains.

For a step-by-step guide, refer to the official article: How to Set Up an Anti-Phishing Code.

2. Official Safety Recommendations

(1) Access KuCoin Web3 Wallet only through official channels:

(2) Never disclose your seed phrase, private key, or verification code.

KuCoin will never request these details under any circumstances.

(3) Verify before connecting your wallet or signing any transaction.

Always confirm the authenticity of the website, smart contract, and campaign source before granting permissions.

(4) Be cautious of paid ads or search results.

Always navigate manually to official domains or use saved bookmarks.

(5) Report suspicious messages, websites, or links immediately.

Users can report incidents directly via the official Telegram group or KuCoin Support Center.

3. What to Do If My Wallet Is Compromised

If you suspect your wallet has been compromised or unauthorized transactions occur:

(1) Transfer remaining assets immediately

Move any unaffected funds to a new, secure wallet that was created directly from the official KuCoin App or website.

(2) Delete the compromised wallet and create a new one

Once assets are secured, delete the affected wallet to prevent further exposure.

(3) Back up your new wallet securely

  • Write down the mnemonic phrase and private key manually.

  • Store them in a safe, offline location.

  • Do not take screenshots or store seed phrases on internet-connected devices.

(4) Revoke suspicious authorizations

Visit blockchain explorers (e.g., revoke.cash) to revoke approvals granted to unknown or malicious smart contracts.

(5) Avoid third-party authorizations

Do not connect your wallet to unknown DApps or unofficial platforms. Unauthorized access can result in data leakage and permanent asset loss.

(6) Report the incident

Notify KuCoin Support and the official Telegram moderators with full details, including:

  • The compromised wallet address,

  • The suspicious link or message, and

  • The approximate time and nature of the activity.

About KuCoin Web3 Wallet:
🔗 X (Twitter)
🔗 Telegram
🔗 Get KuCoin Web3 wallet