NFT Wallet Security and Scams 5 — Questions and Answers
Question 1: What is a 'seed phrase' (recovery phrase) and what level of access does it grant?
- A password for your marketplace account with limited permissions
- A 12-24 word phrase that gives complete control over all assets in a wallet (Correct answer)
- An encrypted backup file stored on the blockchain
- A one-time code sent via SMS for transaction confirmation
Correct answer: A 12-24 word phrase that gives complete control over all assets in a wallet
A seed phrase is the master key to a wallet; anyone who has it can import the wallet on any device and control all its assets.
Question 2: How can you verify that an NFT collection listed on a marketplace is authentic and not counterfeit?
- Trust the collection's follower count on social media
- Check that the smart contract address matches the one published on the official project website (Correct answer)
- Look for a high floor price as proof of legitimacy
- Rely on the number of verified reviews from other buyers
Correct answer: Check that the smart contract address matches the one published on the official project website
Scammers create identically named collections with different contract addresses; the only reliable verification is matching the official contract address.
Question 3: What is 'clipboard hijacking' malware and how does it threaten NFT users?
- Malware that screenshots your browser history and sends it to attackers
- Malware that silently replaces a copied wallet address with the attacker's address (Correct answer)
- A browser extension that auto-fills your seed phrase on phishing sites
- A keylogger that records your marketplace login credentials
Correct answer: Malware that silently replaces a copied wallet address with the attacker's address
Clipboard hijackers monitor copy events and swap any detected wallet address with the attacker's, redirecting transfers without the user noticing.
Question 4: Why should you be cautious of NFT projects that promise guaranteed returns or fixed profit percentages?
- NFTs cannot legally be sold in the United States
- Guaranteed returns are a hallmark of fraudulent investment schemes, not legitimate art projects (Correct answer)
- Marketplaces automatically delist projects with return promises
- Only stablecoins can offer returns, not NFTs
Correct answer: Guaranteed returns are a hallmark of fraudulent investment schemes, not legitimate art projects
No NFT project can legally guarantee returns; promises of fixed profits are a classic sign of a Ponzi scheme or securities fraud.
Question 5: What should you do immediately if you suspect your NFT wallet has been compromised?
- Wait 24 hours and monitor for unusual activity before acting
- Transfer remaining assets to a new, secure wallet as quickly as possible (Correct answer)
- Contact the NFT marketplace's customer support to freeze your account
- Reset your internet router to disconnect the attacker
Correct answer: Transfer remaining assets to a new, secure wallet as quickly as possible
Moving assets to a fresh wallet with a new seed phrase is the fastest way to prevent further losses once a compromise is suspected.
Question 6: What is a 'multisig wallet' and how does it improve NFT security?
- A wallet that requires multiple private key signatures to authorize transactions, reducing single-point-of-failure risk (Correct answer)
- A wallet that stores NFTs across multiple blockchains simultaneously
- A wallet protected by biometric authentication instead of a seed phrase
- A shared marketplace account used by NFT trading teams
Correct answer: A wallet that requires multiple private key signatures to authorize transactions, reducing single-point-of-failure risk
Multisig wallets require M-of-N key holders to approve any transaction, so a single compromised key cannot drain the wallet alone.
Question 7: Which scenario describes a 'counterfeit NFT' scam?
- An artist selling their own work at below-market prices
- Someone minting and selling copies of a popular NFT artwork without the original creator's permission (Correct answer)
- A project reducing its total supply after launch
- An NFT whose metadata points to a file stored on a centralized server
Correct answer: Someone minting and selling copies of a popular NFT artwork without the original creator's permission
Counterfeit NFTs are unauthorized copies of popular artworks minted by scammers who profit from unsuspecting buyers who mistake them for the originals.
NFT Wallet Security and Scams 5
What is a 'seed phrase' (recovery phrase) and what level of access does it grant?