Security & scams
Lookalike addresses, tokens that arrive uninvited, approvals, and people posing as us.
A token I never bought appeared in my walletAnyone can send any token to any address, including tokens made to imitate real ones. Smartable marks what it cannot vouch for and never merges an imitation into the real asset's row — the safe response is to ignore it and hide it.An address in my history looks almost like one I useThat is address poisoning — an attacker sends a zero-value transfer from an address that starts and ends like one you have paid, hoping you copy it later. Smartable flags these and warns before you pay one, but the habit that stops it is never copying a recipient from your history.How to tell fake Smartable support from the real thingSmartable will never ask for your recovery phrase, private key, password, PIN or recovery shares, and never asks you to sign a transaction to "verify" or "recover" a wallet. Anyone who does is not Smartable, whatever name or logo they use.Token approvals: what they are and how to revoke themAn approval lets a contract spend a token from your address without asking again. Settings → Security → Token approvals lists the approvals made in this wallet and revokes them; revoking stops future spending, it does not undo past transactions.
Security note
Never share your recovery phrase, private key, password or device PIN. Smartable will never ask for them or ask you to sign a transaction to “verify” or “recover” your wallet.