The “support” DM
Looks like: a friendly message from “BlueMan Support” or “MetaMask Help” after you ask a question in a group.
Do: ignore and block. Real support never writes first and never asks for your phrase.
The lookalike website
Looks like: blueman-claim.io, bIueman.io (a capital i instead of l), opensea-verify.com. A perfect copy of the real design.
Do: use your own bookmarks. Check the address bar before connecting anything.
The “free mint” or airdrop
Looks like: “BlueMan Season 2 free claim, only today!” with a link, often from a hacked account you follow.
Do: check the official channels. If it is not there, it does not exist.
The approval drainer
Looks like: a site asks you to “verify” or “claim”, then MetaMask asks to approve access to your NFTs.
Do: reject. One approval lets the scammer take every NFT in that collection later, without asking again.
The surprise NFT
Looks like: an unknown NFT or token appears in your wallet with a link to “claim your reward”.
Do: nothing. Do not click, sell or burn it. Hide it in your wallet and move on. More
The “let me help” call
Looks like: someone offers to walk you through a problem on a video call, asks you to share your screen or install AnyDesk/TeamViewer.
Do: end the call. They are waiting for your recovery phrase to appear on screen.
The poisoned address
Looks like: a tiny transfer from an address that starts and ends exactly like one you use, so it sits in your history.
Do: never copy an address from your transaction history. Check every character, not just the start and end.
The fake marketplace email
Looks like: “You received an offer for BlueMan #29, accept here” or “your listing expires”.
Do: open OpenSea yourself and check your offers there. Never through the email link.
The patient friend
Looks like: a kind stranger who chats with you for weeks, then shares a “trading platform” where they make great returns. Your first small withdrawals even work.
Do: never invest through a platform someone you met online recommends. The early profits are bait for a bigger deposit you never get back.
The “test our game” offer
Looks like: a job, a paid beta test or a new Web3 game. You are asked to download an app or a file to get started.
Do: don’t install it. These files often steal browser data and wallets from your computer without you noticing.