Glossary

Wallets, Security & Custody

What is an approval phishing scam?

An approval phishing scam tricks you into signing a token approval that hands an attacker permission to spend assets from your wallet. Instead of stealing your password or seed phrase, it abuses the normal approval mechanism: a deceptive site or message asks you to confirm a transaction that looks routine but actually grants spending access. For example, a fake minting page may request an approval that lets the attacker withdraw a token whenever they choose. Because you authorized it, the transfer appears valid. Checking exactly what a transaction approves before signing is the core protection.

Crypto investments are subject to market risk and volatility. Past performance is not indicative of future returns. This is general information, not investment advice — consider your own circumstances or consult a qualified adviser before investing.

Related terms

Ready to go beyond the definition?

Join the waitlist for early access to the QSI Crypto Indices.

Join the waitlist