imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Security Guide

Pre-transfer Checklist

Review the address, network, amount, gas, token and transaction details before sending assets.

01Address
02Network
03Amount
04Token
05Final review

01

Understand the role of Address

In “Pre-transfer Checklist,” Address is not an isolated idea. It works with Network and Final review to determine what the user sees and where an action actually takes place. Once those boundaries are clear, interface prompts become easier to evaluate.

On-chain transactions generally cannot be unilaterally reversed by a wallet, so pre-transfer checks matter more than post-transfer recovery. Use the same address, network, asset, amount and source checklist every time. This section therefore focuses on reasoning through the relationship between Address, Network and the resulting on-chain state rather than memorizing interface locations.

A practical review habit

  • Identify the active network and the object represented by Address, not only its display name.
  • When Network is involved, confirm that both concepts share the intended network and permission context.
  • Keep public verification details such as a transaction hash when troubleshooting, but never expose recovery secrets.

02

How Network works with Amount

Start with the goal of the action, then identify the network, address, contract or permission context represented by Network. Similar names, icons or page layouts do not prove that two environments are equivalent; network and on-chain identifiers provide stronger context.

On-chain transactions generally cannot be unilaterally reversed by a wallet, so pre-transfer checks matter more than post-transfer recovery. Use the same address, network, asset, amount and source checklist every time. This section therefore focuses on reasoning through the relationship between Network, Amount and the resulting on-chain state rather than memorizing interface locations.

A practical review habit

  • Identify the active network and the object represented by Network, not only its display name.
  • When Amount is involved, confirm that both concepts share the intended network and permission context.
  • Keep public verification details such as a transaction hash when troubleshooting, but never expose recovery secrets.

03

Reviewing Amount during an action

A repeatable review of Amount can begin with the source and network, continue with the target and parameters, and end with the asset or permission change the action may create. Consistency is more useful than trying to confirm quickly.

On-chain transactions generally cannot be unilaterally reversed by a wallet, so pre-transfer checks matter more than post-transfer recovery. Use the same address, network, asset, amount and source checklist every time. This section therefore focuses on reasoning through the relationship between Amount, Token and the resulting on-chain state rather than memorizing interface locations.

A practical review habit

  • Identify the active network and the object represented by Amount, not only its display name.
  • When Token is involved, confirm that both concepts share the intended network and permission context.
  • Keep public verification details such as a transaction hash when troubleshooting, but never expose recovery secrets.

04

Common assumptions to avoid

A common mistake around Token is treating display information as final on-chain truth, or assuming that a workflow that was safe once will be identical on another network, asset or DApp. Re-read the current request every time.

On-chain transactions generally cannot be unilaterally reversed by a wallet, so pre-transfer checks matter more than post-transfer recovery. Use the same address, network, asset, amount and source checklist every time. This section therefore focuses on reasoning through the relationship between Token, Final review and the resulting on-chain state rather than memorizing interface locations.

A practical review habit

  • Identify the active network and the object represented by Token, not only its display name.
  • When Final review is involved, confirm that both concepts share the intended network and permission context.
  • Keep public verification details such as a transaction hash when troubleshooting, but never expose recovery secrets.

05

Make Final review part of a routine

Making Final review part of a routine means adding checkpoints before, during and after an operation: verify the conditions, read the request, then confirm the result through the transaction hash, network state or approval record.

On-chain transactions generally cannot be unilaterally reversed by a wallet, so pre-transfer checks matter more than post-transfer recovery. Use the same address, network, asset, amount and source checklist every time. This section therefore focuses on reasoning through the relationship between Final review, Address and the resulting on-chain state rather than memorizing interface locations.

A practical review habit

  • Identify the active network and the object represented by Final review, not only its display name.
  • When Address is involved, confirm that both concepts share the intended network and permission context.
  • Keep public verification details such as a transaction hash when troubleshooting, but never expose recovery secrets.

Important security reminder

Seed phrases and private keys should remain under the user’s control, and official personnel will not request them or verification codes. Check the address, network and amount before a transfer; on-chain transactions generally cannot be unilaterally reversed by a wallet. Third-party DApps and smart contracts carry risk, so review the spender and permission scope and consider revoking unused approvals.

Before you continue

Use a repeatable review routine

  • Verify the active network and target address or contract
  • Independently review unfamiliar domains, signing targets and long-lived approvals
  • Never send a seed phrase, private key or verification code to anyone
  • Verify the result through a transaction hash or approval record
  • If a request is unclear, stop and verify the source before continuing