Week in literacy
Five short literacy notes from primary wallet, protocol, and consumer-protection sources. Original paraphrases only—link out to read the originals. Educational content only — not investment advice.
1. A friendly simulation is still only a dry run
MetaMask’s simulations article explains that the wallet can preview estimated balance changes before you submit—tokens in, tokens out, NFTs moving. It also warns that off-chain-only simulations can be fooled when a contract behaves differently in a preview environment than on real execution (“red pill” style mismatches). Treat the preview as a reading aid, not a guarantee.
Literacy takeaway: If the preview disagrees with your intent, reject. New walkthrough: transaction simulations and wallet previews.
Source: What are transaction simulations? — MetaMask Help Center (accessed 2026-10-02) — https://support.metamask.io/manage-crypto/transactions/simulations/
2. Unused browser extensions are an attack surface
ethereum.org’s security page notes that many extensions request permission to read and change site data, that extensions auto-update, and that a once-safe extension can later ship malicious code. Literacy here is housekeeping: install only from trusted sources, remove what you do not use, and remember a wallet session shares the same browser risk model as your other tabs.
Literacy takeaway: Fewer extensions, fewer surprise permissions. Related: hot wallet hygiene.
Source: Ethereum security and scam prevention (browser extensions) — ethereum.org (accessed 2026-10-02) — https://ethereum.org/en/security/
3. Link previews can lie—check the domain yourself
ethereum.org documents a phishing pattern that spoofs social-media URL previews (unfurling) so a shared link can look like a familiar site while the redirect goes elsewhere. The durable habit is boring: after every click, read the address bar hostname before you connect a wallet or enter secrets.
Literacy takeaway: Trust the typed domain, not the card preview. Patterns: common crypto scams.
Source: Ethereum security and scam prevention (Twitter ad phishing / unfurling) — ethereum.org (accessed 2026-10-02) — https://ethereum.org/en/security/
4. Read the transaction message before you sign
The same ethereum.org security guidance stresses that accidental wrong-address sends are common and generally irreversible, and that when interacting with a smart contract you should read the transaction message before signing. Simulations help decode intent; they do not excuse skipping the fields your wallet shows.
Literacy takeaway: Slow confirmations beat fast regrets. See how to read a wallet prompt.
Source: Ethereum security and scam prevention (double-check transactions) — ethereum.org (accessed 2026-10-02) — https://ethereum.org/en/security/
5. FTC: urgency plus “pay in crypto” is a scam pattern
The FTC’s consumer page on cryptocurrency and scams reminds readers that legitimate businesses do not typically demand cryptocurrency under pressure to “fix” or “protect” an account, and that crypto payments are hard to reverse. Impersonators still combine fear, a short deadline, and a wallet address or QR—open official channels yourself instead of following the message.
Literacy takeaway: Unexpected crypto payment demands are fraud literacy, not customer service. More: common crypto scams.
Source: What To Know About Cryptocurrency and Scams — FTC Consumer Advice (May 2022; accessed 2026-10-02) — https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-and-scams
Educational content only — not investment advice. This digest paraphrases public educational pages for literacy. It does not recommend buying, selling, or holding any cryptocurrency or token, and it is not financial, tax, or legal advice.