How do I recognize phishing emails about crypto?

Rules of thumb:

• Legitimate exchanges and wallets never email asking you to 'verify your seed phrase', 'reconfirm your wallet', or 'connect to a security site'. Any such email is phishing, full stop.
• Hover over links before clicking. Compare the domain to the real one character-by-character. Watch for swapped letters, hyphens, or unusual TLDs (.app, .xyz, .top).
• Check the sender's full email address, not just the display name.
• Real urgency emails (unusual login, withdrawal request) link to the official login page only, never to a 'verification' form.

When in doubt: never click the email link. Open the service in a separate browser tab by typing the URL yourself, and check the notification center inside the app.