Phishing

A social-engineering attack that tricks users into visiting a fraudulent website or app that mimics a legitimate one, then harvests seed phrases, private keys, or wallet signatures. Crypto phishing pages often rank in search results or arrive via direct messages on social platforms. SSP's two-device model does not protect against a user who voluntarily enters their seed phrase into a fake site.