Week in literacy
Five short literacy notes from primary wallet, protocol, and consumer-protection sources. Original paraphrases only—link out to read the originals. Educational content only — not investment advice.
1. Fake “support” after you ask for help is a spoofing pattern
MetaMask’s spoofing guide describes attackers who watch public questions (for example on social replies), then DM as lookalike support and ask for a Secret Recovery Phrase, password, or account login—often while sounding helpful about a stuck transaction. Official MetaMask support is reached through Help Center channels; unsolicited DMs that request secrets are a red flag, not customer service.
Literacy takeaway: Pending-tx stress is a common pretext for seed phishing—hang up the DM and open support yourself. Patterns: common crypto scams.
Source: Spoofing scams — MetaMask Help Center (2026-09-18) — https://support.metamask.io/stay-safe/protect-yourself/social-engineering/spoofing-scams/
2. Real MetaMask does not need your seed on a random website
MetaMask’s verify guide is blunt: the wallet exists as the official browser extension and mobile app; routine entry of the Secret Recovery Phrase is only for first-time confirmation or restore/password reset paths you start yourself. Clone sites, emails, and social profiles imitate branding to harvest phrases—compare URLs to metamask.io / support.metamask.io and never type a seed into a page that “verifies” your account.
Literacy takeaway: Bookmark official download and help URLs; seeds stay offline. See seed-phrase safety.
Source: How to verify the real MetaMask wallet — MetaMask Help Center (2026-09-18) — https://support.metamask.io/stay-safe/safety-in-web3/how-do-i-recognize-the-real-metamask-/
3. Hardware wallets keep keys offline; the seed is still the master backup
ethereum.org’s security page frames hardware wallets as offline private-key storage—the key stays on the device rather than living on an always-online computer. That improves day-to-day exposure, but the recovery phrase that backs the device remains the master secret: anyone who photographs or phishes it can recreate the wallet elsewhere. Self-custody literacy is device hygiene plus seed hygiene together.
Literacy takeaway: Cold hardware helps; a leaked seed still empties the accounts. Pair with wallet basics.
Source: Ethereum security and scam prevention — ethereum.org (accessed 2026-09-18) — https://ethereum.org/en/security/
4. Bridges connect ecosystems—verify both sides before you treat a transfer as done
ethereum.org’s bridges overview compares cross-chain bridges to physical bridges: they connect separate blockchain ecosystems so assets (or representations of them) can move. That convenience adds failure modes—contracts, operators, and wrapped representations—so literacy means reading official docs and checking explorers on both networks rather than trusting a single success toast.
Literacy takeaway: Confirm source and destination explorers yourself. Walk through our bridges in plain English doc.
Source: Blockchain bridges — ethereum.org (accessed 2026-09-18) — https://ethereum.org/en/bridges/
5. Gas is work × price—not a market timer
Why it matters this week: congestion and complexity still surprise newcomers who see a pending send and assume something is “broken.” ethereum.org’s gas docs explain fees as payment for computation (base fee plus tip on EIP-1559-style networks). Reading Gas Used and Transaction Fee on an explorer is bill literacy; it is not a signal to buy or sell.
Literacy takeaway: Learn the fee vocabulary, then stop. Full walkthrough: gas fees explained.
Source: Gas and fees — ethereum.org (accessed 2026-09-18) — https://ethereum.org/en/developers/docs/gas/
Educational content only — not investment advice. This digest paraphrases public educational pages for literacy. It does not recommend buying, selling, or holding any cryptocurrency or token, and it is not financial, tax, or legal advice.