One small change that makes phishing a lot harder: use a separate email address only for exchanges, wallets and money apps. Don't post it anywhere, don't sign up for newsletters with it, and turn on the strongest sign-in it offers. Scammers have a much harder time targeting an inbox they've never seen, and a fake "support" message stands out fast when that address only hears from a few places.