Fake job offers often borrow the language and branding of real Web3 projects. Slow down and verify the employer before clicking links, connecting a wallet or sharing identity documents.
Stop if a recruiter asks for these
- Your wallet seed phrase or private key. No employer needs either.
- Crypto, a token purchase, a deposit, a “gas fee” or a payment to unlock an interview, job or salary.
- Remote access to your computer or installation of an unknown wallet, browser extension or “assessment” file.
- A signature that you cannot explain, especially one requesting token approvals or asset transfers.
- Urgent secrecy, guaranteed earnings or pressure to act before you verify the company.
Verify the opening independently
Navigate to the company website yourself, find its careers page, and compare the job title, recruiter identity and email domain. Contact the company through a published channel if anything differs. A profile badge or professional-looking message is not proof by itself.
Handle test assignments carefully
Ask for scope, deadline and expected effort. Use a clean environment for code tasks, do not run unknown binaries, and avoid handing over extensive unpaid work that could be used as production output.
If you already shared something
If you exposed a seed phrase or private key, treat that wallet as compromised. From a clean device, move remaining assets to a new wallet you control, revoke token approvals where possible, and contact the relevant platform using its official support route. Do not trust unsolicited “recovery agents.”
This guide is general safety information, not legal or cybersecurity incident-response advice.