# Swoopr Investment: Security & Scams
# Scoped content manifest for LLM agents and web crawlers.
# Generated: 2026-10-09
# 65 pages in this section.
# Root index: https://www.getswoopr.com/llms.txt

## Learn: Security

- [Crypto Security & Scam Center](https://www.getswoopr.com/security/) ([Markdown](https://www.getswoopr.com/security.md)): Crypto security guide from Swoopr Investment: protect wallets, exchange accounts, and digital assets from phishing, token approvals, scams, and exchange.
- [Copy Trading and Signal Scams](https://www.getswoopr.com/security/copy-trading-signal-scams/) ([Markdown](https://www.getswoopr.com/security/copy-trading-signal-scams.md)): Learn how copy-trading and signal scams work, how fake returns and group chats are used, how to verify a provider, and what to do if you already sent money.
- [What to Do After a Crypto Scam or Hack](https://www.getswoopr.com/security/crypto-scam-recovery/) ([Markdown](https://www.getswoopr.com/security/crypto-scam-recovery.md)): What to do after a crypto scam or wallet hack: disconnect, secure accounts, revoke approvals, preserve evidence, report it, and avoid recovery scams.
- [Investment Fraud Enforcement and Checks](https://www.getswoopr.com/security/investor-scam-enforcement-and-verification/) ([Markdown](https://www.getswoopr.com/security/investor-scam-enforcement-and-verification.md)): Which regulator handles which investment fraud, what each enforcement stage really means, and how to check a firm in BrokerCheck, IAPD and state records.

## Learn: Security — Phishing & Wallet Drainers

- [Crypto Phishing & Wallet Drainers Explained](https://www.getswoopr.com/security/phishing/) ([Markdown](https://www.getswoopr.com/security/phishing.md)): The complete guide to crypto phishing and wallet drainers: attack vectors, delivery channels, drainer-script mechanics, and how to defend a wallet.
- [Clipboard Hijacking Malware in Crypto](https://www.getswoopr.com/security/phishing/clipboard-hijacking-malware/) ([Markdown](https://www.getswoopr.com/security/phishing/clipboard-hijacking-malware.md)): Clipboard hijacking malware secretly swaps a copied crypto address for a lookalike one before you paste, redirecting funds with no phishing click at all.
- [Discord & Telegram Phishing Scams](https://www.getswoopr.com/security/phishing/discord-telegram-phishing/) ([Markdown](https://www.getswoopr.com/security/phishing/discord-telegram-phishing.md)): Discord and Telegram are the top delivery channels for crypto phishing: fake support DMs, hacked mod accounts, and cloned servers. Spot the warning signs.
- [Fake Airdrop Phishing & Dusting Attacks](https://www.getswoopr.com/security/phishing/fake-airdrop-phishing/) ([Markdown](https://www.getswoopr.com/security/phishing/fake-airdrop-phishing.md)): Fake airdrop scams use claim sites, dusting, and malicious approvals to drain wallets. Learn the mechanics, warning signs, and how to spot a fake claim.
- [Fake Browser Extensions](https://www.getswoopr.com/security/phishing/fake-browser-extensions/) ([Markdown](https://www.getswoopr.com/security/phishing/fake-browser-extensions.md)): Fake MetaMask and Phantom clone extensions, plus trojanized crypto helper tools, steal seed phrases and swap send addresses. Learn to verify safely.
- [Fake Customer Support Scams in Crypto](https://www.getswoopr.com/security/phishing/fake-customer-support-scams/) ([Markdown](https://www.getswoopr.com/security/phishing/fake-customer-support-scams.md)): Fake support phone numbers, cloned live-chat widgets, and remote-access tricks: how crypto support scams work, and how to tell real help from theft.
- [Fake Mobile Wallet Apps](https://www.getswoopr.com/security/phishing/fake-wallet-apps/) ([Markdown](https://www.getswoopr.com/security/phishing/fake-wallet-apps.md)): Fake wallet apps clone real branding on the Apple App Store and Google Play, then steal your seed phrase the moment you enter it. Verify before install.
- [How Crypto Phishing Attacks Work](https://www.getswoopr.com/security/phishing/how-phishing-works/) ([Markdown](https://www.getswoopr.com/security/phishing/how-phishing-works.md)): How crypto phishing attacks unfold step by step, the psychology attackers exploit, and a worked wallet-drain example showing where to stop it.
- [How to Verify a Legitimate Crypto Site](https://www.getswoopr.com/security/phishing/how-to-verify-a-legitimate-site/) ([Markdown](https://www.getswoopr.com/security/phishing/how-to-verify-a-legitimate-site.md)): A repeatable 7-step checklist for verifying a crypto site or service is legitimate before you connect a wallet, enter credentials, or sign anything.
- [Malicious dApp Wallet Connections Explained](https://www.getswoopr.com/security/phishing/malicious-dapp-connections/) ([Markdown](https://www.getswoopr.com/security/phishing/malicious-dapp-connections.md)): Connecting a wallet only reveals your address; funds move only when you sign. See how malicious dApps abuse approvals and why exposure still matters.
- [QR Code Phishing (Quishing) Targets Wallets](https://www.getswoopr.com/security/phishing/qr-code-phishing/) ([Markdown](https://www.getswoopr.com/security/phishing/qr-code-phishing.md)): QR codes hide their destination until scanned. See how quishing scams swap physical codes, fake WalletConnect pairings, and drain crypto wallets fast.
- [SIM-Swap Attacks: How They Drain Crypto](https://www.getswoopr.com/security/phishing/sim-swap-attacks/) ([Markdown](https://www.getswoopr.com/security/phishing/sim-swap-attacks.md)): SIM-swap attacks hijack your phone number to intercept SMS codes, letting attackers bypass 2FA, take over accounts, and drain crypto. Here is how it works.
- [Social Media Impersonation in Crypto Scams](https://www.getswoopr.com/security/phishing/social-media-impersonation/) ([Markdown](https://www.getswoopr.com/security/phishing/social-media-impersonation.md)): Fake verified accounts, reply bots, hijacked real profiles, and livestream giveaways: how crypto social media impersonation works, and how to spot it.
- [Typosquatting and Fake Crypto Domains](https://www.getswoopr.com/security/phishing/typosquatting-fake-domains/) ([Markdown](https://www.getswoopr.com/security/phishing/typosquatting-fake-domains.md)): Typosquatting tricks crypto users with near-identical fake domains: swapped letters, homoglyphs, wrong TLDs. Learn how to spot and avoid these scams.
- [Wallet Drainer Scripts Explained](https://www.getswoopr.com/security/phishing/wallet-drainer-scripts-explained/) ([Markdown](https://www.getswoopr.com/security/phishing/wallet-drainer-scripts-explained.md)): How wallet drainer scripts automatically sweep crypto within seconds of a signed approval, why speed beats victims, and how to avoid triggering one.

## Learn: Security — Token Approvals & Blind Signing

- [Token Approvals & Blind Signing Explained](https://www.getswoopr.com/security/approvals/) ([Markdown](https://www.getswoopr.com/security/approvals.md)): The complete guide to token approvals and blind signing: what they authorize, unlimited limits, permits, and how to revoke and defend against them.
- [Token Approval Best Practices Checklist](https://www.getswoopr.com/security/approvals/approval-best-practices-checklist/) ([Markdown](https://www.getswoopr.com/security/approvals/approval-best-practices-checklist.md)): The complete token approval checklist: before approving, during signing, and ongoing reviews, with a worked example and links to every related guide.
- [How Approval Phishing Fuels Drainers](https://www.getswoopr.com/security/approvals/approval-phishing-drainers/) ([Markdown](https://www.getswoopr.com/security/approvals/approval-phishing-drainers.md)): Approval phishing is the engine behind drainer-as-a-service: why signatures beat transfers, how affiliates split stolen funds, and how to cut exposure.
- [Blind Signing: Approving What You Can't Read](https://www.getswoopr.com/security/approvals/blind-signing-explained/) ([Markdown](https://www.getswoopr.com/security/approvals/blind-signing-explained.md)): Blind signing means approving a wallet request shown as raw hex or a generic prompt, not plain language. How it happens, and how to defend against it.
- [Common Token Approval Mistakes](https://www.getswoopr.com/security/approvals/common-approval-mistakes/) ([Markdown](https://www.getswoopr.com/security/approvals/common-approval-mistakes.md)): Eight token approval mistakes that quietly drain wallets: unlimited defaults, unchecked setApprovalForAll, and why experienced users repeat them anyway.
- [EIP-2612 Permit Signatures & Permit2](https://www.getswoopr.com/security/approvals/eip-2612-permit-signatures/) ([Markdown](https://www.getswoopr.com/security/approvals/eip-2612-permit-signatures.md)): EIP-2612 permit signatures approve token spending off-chain for free, no transaction needed. Learn how Permit2 works and why fake permits drain wallets.
- [Hardware Wallet Signing Safety Explained](https://www.getswoopr.com/security/approvals/hardware-wallet-signing-safety/) ([Markdown](https://www.getswoopr.com/security/approvals/hardware-wallet-signing-safety.md)): A hardware wallet keeps your private key off your computer, but it still signs a malicious approval you approve on-screen. Here's the real boundary.
- [How to Revoke Token Approvals](https://www.getswoopr.com/security/approvals/how-to-revoke-token-approvals/) ([Markdown](https://www.getswoopr.com/security/approvals/how-to-revoke-token-approvals.md)): How to revoke token approvals: what revoking means on-chain, the step-by-step process, why old approvals stay risky, and how often to review them.
- [Malicious Approval Transactions](https://www.getswoopr.com/security/approvals/malicious-approval-transactions/) ([Markdown](https://www.getswoopr.com/security/approvals/malicious-approval-transactions.md)): Spot malicious approval requests before signing: unlimited allowances, setApprovalForAll NFT drains, unfamiliar spenders, and how wallet simulation helps.
- [Multisig Wallet Security Explained](https://www.getswoopr.com/security/approvals/multisig-wallet-security/) ([Markdown](https://www.getswoopr.com/security/approvals/multisig-wallet-security.md)): A multisig wallet requires multiple signers to approve any transaction, stopping one phished approval, though a coordinated attacker can still defeat it.
- [NFT Approval Risks: setApprovalForAll](https://www.getswoopr.com/security/approvals/nft-approval-risks/) ([Markdown](https://www.getswoopr.com/security/approvals/nft-approval-risks.md)): A single setApprovalForAll grant can let an attacker move every NFT you own in a collection. Learn the risk, a real drainer scenario, and how to revoke it.
- [Check What a Contract Approval Does](https://www.getswoopr.com/security/approvals/smart-contract-approval-audits/) ([Markdown](https://www.getswoopr.com/security/approvals/smart-contract-approval-audits.md)): How to verify a contract before approving it: explorer verification, audits, deployment age, reading approve/transferFrom code, and simulation tools.
- [Token Allowance Checker Tools](https://www.getswoopr.com/security/approvals/token-allowance-checker-tools/) ([Markdown](https://www.getswoopr.com/security/approvals/token-allowance-checker-tools.md)): Token allowance checker tools scan your wallet's on-chain approval history so you can spot risky approvals and revoke them before they're exploited.
- [Unlimited vs. Limited Token Approvals](https://www.getswoopr.com/security/approvals/unlimited-vs-limited-approvals/) ([Markdown](https://www.getswoopr.com/security/approvals/unlimited-vs-limited-approvals.md)): Unlimited token approvals save gas long-term but risk your entire balance if the spender contract is ever exploited. Learn the tradeoff and when to limit.
- [What Is a Token Approval?](https://www.getswoopr.com/security/approvals/what-is-a-token-approval/) ([Markdown](https://www.getswoopr.com/security/approvals/what-is-a-token-approval.md)): What an ERC-20 token approval actually grants, how approve() differs from a token transfer, a worked Etherscan example, and where to check your exposure.

## Learn: Security — Trading & Crypto Scams

- [Common Crypto Scams & How to Avoid Them](https://www.getswoopr.com/security/crypto-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams.md)): Learn the seven most common crypto scams, phishing, rug pulls, romance and recovery fraud, with warning signs, examples, and a prevention checklist.
- [Copy-Trading Scams: Fake Signals, Gurus](https://www.getswoopr.com/security/crypto-scams/copy-trading-scam-signals/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/copy-trading-scam-signals.md)): Learn how copy-trading and signal scams fake track records, pressure users to deposit funds, and hide losses. Use a practical checklist to verify claims before paying or connecting accounts.
- [Cross-Platform Scam Evidence Tracking](https://www.getswoopr.com/security/crypto-scams/cross-platform-scam-evidence-tracking/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/cross-platform-scam-evidence-tracking.md)): How to preserve crypto scam evidence across Discord, Telegram, wallets, and exchanges before it disappears, with a platform-by-platform capture guide.
- [Crypto Exit Scams: When Platforms Vanish](https://www.getswoopr.com/security/crypto-scams/exit-scams-explained/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/exit-scams-explained.md)): An exit scam pays out for months before halting withdrawals and vanishing with deposits. Learn the lifecycle, warning signs, and how to reduce your risk.
- [Fake Celebrity Endorsement Crypto Scams](https://www.getswoopr.com/security/crypto-scams/fake-celebrity-endorsement-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/fake-celebrity-endorsement-scams.md)): Deepfake videos, fake news sites, and doctored posts falsely link celebrities to crypto projects. How the scam works and how to verify a real endorsement.
- [Fake Cloud Mining & Staking Scams](https://www.getswoopr.com/security/crypto-scams/fake-mining-and-staking-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/fake-mining-and-staking-scams.md)): Fake cloud-mining and staking platforms promise fixed, guaranteed yields no real mining or protocol could pay. Learn the red flags and how to verify.
- [Fake Token Presale and ICO Scams](https://www.getswoopr.com/security/crypto-scams/fake-token-presales/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/fake-token-presales.md)): Fake token presales collect funds for a launch that never happens. Learn the credibility tactics, a worked example, and due-diligence steps to use first.
- [Crypto Giveaway & Airdrop Scams Explained](https://www.getswoopr.com/security/crypto-scams/giveaway-and-airdrop-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/giveaway-and-airdrop-scams.md)): Any crypto giveaway asking you to send funds first to receive double back is always a scam. Learn the tactics, red flags, and how to verify offers.
- [Honeypot Tokens Explained](https://www.getswoopr.com/security/crypto-scams/honeypot-tokens-explained/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/honeypot-tokens-explained.md)): Honeypot tokens let anyone buy freely but block, tax, or restrict selling, trapping funds while the price climbs. Learn how to detect one before buying.
- [How to Report a Crypto Scam](https://www.getswoopr.com/security/crypto-scams/how-to-report-a-crypto-scam/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/how-to-report-a-crypto-scam.md)): Where to report a crypto scam: IC3.gov, the FTC, and state regulators, what evidence to gather, and a full reporting-channel map for every scam type.
- [How to Verify a Copy-Trading Provider](https://www.getswoopr.com/security/crypto-scams/how-to-verify-a-copy-trading-provider-before-connecting-funds/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/how-to-verify-a-copy-trading-provider-before-connecting-funds.md)): Before connecting funds to a copy-trading provider, check custody structure, fee and spread markups, leaderboard survivorship bias, and permission scope.
- [Pig-Butchering Scams](https://www.getswoopr.com/security/crypto-scams/pig-butchering-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/pig-butchering-scams.md)): How pig-butchering scams build weeks of trust before draining crypto through a fake trading platform, with warning signs and a worked composite example.
- [Crypto Ponzi & High-Yield Scams Explained](https://www.getswoopr.com/security/crypto-scams/ponzi-and-high-yield-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/ponzi-and-high-yield-scams.md)): Crypto Ponzi schemes pay early investors with new deposits, not profit. See red flags, a worked collapse timeline, and how to spot fake guaranteed returns.
- [Pump-and-Dump Schemes: How They Work](https://www.getswoopr.com/security/crypto-scams/pump-and-dump-schemes/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/pump-and-dump-schemes.md)): Pump-and-dump groups quietly accumulate a low-liquidity crypto token, spike its price with coordinated hype, then sell into buyers who chase the move.
- [Romance & Social-Engineering Scams](https://www.getswoopr.com/security/crypto-scams/romance-and-social-engineering-scams/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/romance-and-social-engineering-scams.md)): Beyond pig-butchering: how emergency, inheritance, military deployment, and friendship scams use trust and isolation to drain crypto, and how to spot them.
- [Anatomy of a Crypto Rug Pull](https://www.getswoopr.com/security/crypto-scams/rug-pull-anatomy/) ([Markdown](https://www.getswoopr.com/security/crypto-scams/rug-pull-anatomy.md)): How rug pulls actually happen: liquidity pulls, malicious minting, honeypots, and slow rugs, explained with a worked example and due-diligence checklist.

## Learn: Security — Exchange & Platform Security

- [Exchange & Platform Security Guide](https://www.getswoopr.com/security/exchange-security/) ([Markdown](https://www.getswoopr.com/security/exchange-security.md)): The complete guide to exchange and platform security: choosing a secure exchange, protecting your account, verifying reserves, and handling incidents.
- [Exchange API Key Security: Scoping](https://www.getswoopr.com/security/exchange-security/api-key-security-best-practices/) ([Markdown](https://www.getswoopr.com/security/exchange-security/api-key-security-best-practices.md)): Exchange API key security explained: permission scoping, IP whitelisting, and storage risks that decide whether a leaked key can drain your account.
- [How Exchanges Custody Crypto](https://www.getswoopr.com/security/exchange-security/cold-storage-vs-hot-wallet-exchange-practices/) ([Markdown](https://www.getswoopr.com/security/exchange-security/cold-storage-vs-hot-wallet-exchange-practices.md)): How exchanges split custody of user funds between hot wallets and offline cold storage, why the split limits breach losses, and what percentage to expect.
- [Custodial vs. Non-Custodial Exchange Risk](https://www.getswoopr.com/security/exchange-security/custodial-vs-noncustodial-exchange-risk/) ([Markdown](https://www.getswoopr.com/security/exchange-security/custodial-vs-noncustodial-exchange-risk.md)): Custodial exchanges hold your keys; non-custodial ones don't. See how that split changes what happens to your funds when a platform fails or is hacked.
- [Exchange Account Recovery](https://www.getswoopr.com/security/exchange-security/exchange-account-recovery-process/) ([Markdown](https://www.getswoopr.com/security/exchange-security/exchange-account-recovery-process.md)): Legitimate exchange account recovery is deliberately slow, with waiting periods and ID checks. Learn what to expect and how fake support scams exploit it.
- [Historical Exchange Hacks: Patterns](https://www.getswoopr.com/security/exchange-security/exchange-hacks-history-lessons/) ([Markdown](https://www.getswoopr.com/security/exchange-security/exchange-hacks-history-lessons.md)): Mt. Gox, Bitfinex, Coincheck, and Binance were hacked for different reasons, but the same patterns repeat. See what to check before trusting an exchange.
- [Exchange Insurance Funds Explained](https://www.getswoopr.com/security/exchange-security/exchange-insurance-funds-explained/) ([Markdown](https://www.getswoopr.com/security/exchange-security/exchange-insurance-funds-explained.md)): A crypto exchange insurance fund is not FDIC or SIPC coverage. Learn what these self-funded reserves actually cover and how to verify one is real.
- [The Complete Exchange Security Checklist](https://www.getswoopr.com/security/exchange-security/exchange-security-checklist/) ([Markdown](https://www.getswoopr.com/security/exchange-security/exchange-security-checklist.md)): The complete exchange security checklist: what to check before choosing, set up at signup, and monitor ongoing, plus a worked example and full guide map.
- [Exchange 2FA: SMS vs. Authenticator vs. Key](https://www.getswoopr.com/security/exchange-security/exchange-two-factor-authentication/) ([Markdown](https://www.getswoopr.com/security/exchange-security/exchange-two-factor-authentication.md)): SMS, authenticator apps, and hardware keys aren't equally secure. Compare crypto exchange 2FA options, backup-code risks, and how to avoid account lockout.
- [Withdrawal Limits as a Security Feature](https://www.getswoopr.com/security/exchange-security/exchange-withdrawal-limits-security/) ([Markdown](https://www.getswoopr.com/security/exchange-security/exchange-withdrawal-limits-security.md)): Withdrawal limits aren't just a compliance hurdle. They cap your worst-case loss in a full account compromise, and pair directly with whitelisting.
- [Fake Exchange Websites](https://www.getswoopr.com/security/exchange-security/fake-exchange-websites/) ([Markdown](https://www.getswoopr.com/security/exchange-security/fake-exchange-websites.md)): Fake exchange sites clone real login pages, then relay your password and 2FA code live to hijack your account. Learn the tactics and real defenses.
- [How to Choose a Secure Crypto Exchange](https://www.getswoopr.com/security/exchange-security/how-to-choose-a-secure-exchange/) ([Markdown](https://www.getswoopr.com/security/exchange-security/how-to-choose-a-secure-exchange.md)): A practical framework for evaluating a crypto exchange's security: regulation, hack history, custody, proof of reserves, account controls, and insurance.
- [What Proof of Reserves Actually Verifies](https://www.getswoopr.com/security/exchange-security/proof-of-reserves-explained/) ([Markdown](https://www.getswoopr.com/security/exchange-security/proof-of-reserves-explained.md)): Proof of reserves shows an exchange held enough assets at one snapshot moment, not that it is solvent. See how PoR works and where it falls short.
- [Exchange Regulatory Status and Security](https://www.getswoopr.com/security/exchange-security/regulatory-status-exchange-security/) ([Markdown](https://www.getswoopr.com/security/exchange-security/regulatory-status-exchange-security.md)): An exchange's regulatory status shapes fraud, insolvency, and audit risk, but it cannot stop a hack. Here is what to actually check before you deposit.
- [Withdrawal Address Whitelisting Explained](https://www.getswoopr.com/security/exchange-security/withdrawal-whitelist-addresses/) ([Markdown](https://www.getswoopr.com/security/exchange-security/withdrawal-whitelist-addresses.md)): Withdrawal address whitelisting blocks exchange withdrawals to unapproved addresses, so a compromised login and 2FA alone still cannot drain your funds.