Common web3 scams to watch for

• Look-alike domains. unvau1t.com, unvault-claim.xyz, and similar. Only unvault.com and its subdomains are ours.
• Fake support. Someone messages you offering help after you post about a problem. Real support never messages first.
• Malicious signatures. A site asks you to sign something that is actually a listing of your items for near-zero, or a blanket approval. Read the wallet prompt.
• Airdrop and reward bait. "Claim your reward" links that lead to a drainer. Rewards on Unvault are claimed only inside the app.
• Duplicate collections. Copies of a real collection's art and name at a lower price. Check the contract address and the badge, and compare with the collection's official links.
• Rug pulls. A drop with big promises and an anonymous team that vanishes after mint. Do your own research.
• Address poisoning. A transfer from an address that looks like yours, hoping you copy it later. Always copy addresses from a trusted source.

Report scams through the Report control or to trust@unvault.com.