Protect your wallet
How to spot fake Phantom sites
Phantom is a popular wallet, which makes it a frequent target for phishing. The only official domain is phantom.app. Everything else claiming to be Phantom should be treated as suspicious.
Common fake Phantom tricks
Look-alike letters
Domains that swap letters for similar characters, so phantom.app becomes something that looks identical at a glance.
Brand in a sub-part
Putting “phantom” in a subdomain or path of a domain the brand doesn't own, e.g. phantom.claim-xyz.top.
Bait pages
“Claim your Phantom airdrop”, “restore Phantom wallet”, “verify Phantom account” — urgency to make you connect fast.
Checklist before you connect
- Confirm the domain is exactly phantom.app — character by character.
- Check for a padlock and no “xn--” prefix in the address bar.
- Never sign a request you don't understand — especially unlimited approvals.
- Use a security extension that flags fake Phantom domains automatically.
Trust Line catches fake Phantom sites for you
Trust Line compares every domain you visit against Phantom's real address using on-device heuristics, and blocks impersonators before they load.
Add to browser — free