One of the most important habits in crypto security is checking a transaction before signing it. Most wallet exploits do not require an attacker to break the blockchain itself. They only need the user to approve something they did not fully understand.
The first thing I check is the destination address. For normal transfers, I compare more than just the first and last few characters, especially when moving a meaningful amount. Address poisoning and clipboard malware can make a transaction look familiar while actually redirecting funds elsewhere.
For smart contract interactions, the process is more complicated. I want to know what the contract is asking permission to do, which token is involved and whether the approval is limited or unlimited. A simple “Confirm” button does not tell enough of the story.
Transaction simulation is becoming extremely useful here. If a wallet can show the expected asset movements before signing, it becomes much easier to spot something suspicious. Seeing that a transaction would transfer an unexpected token, grant broad spending permission or move assets to an unknown contract can prevent a costly mistake.
I also check the network carefully. Sending an asset on the wrong chain or interacting with a contract on an unexpected network can create problems, especially when several Layer 2s or EVM-compatible networks use similar addresses.
Gas fees can be another warning signal. An unusually high fee does not automatically mean the transaction is malicious, but it is worth investigating if the amount is very different from what the action should normally require.
For new dApps, I prefer verifying the domain separately instead of clicking links from messages or social media. A perfect transaction review is less useful if the wallet was connected to a phishing site from the beginning.
I also think separating wallets by purpose makes transaction verification easier. If one wallet is used only for long-term holdings and another for active DeFi or NFT interactions, the consequences of a bad approval can be limited.
What do you check before signing a crypto transaction?
Do you rely mainly on wallet transaction previews, contract verification, spending limits, address checks or external simulation tools?
And have you ever caught a malicious or incorrect transaction before signing because one detail looked wrong?
I check the destination address, amount, network and contract permissions before signing anything. If the wallet cannot clearly explain what a transaction will do, I would rather reject it than guess.
That’s a good rule — if the wallet can’t clearly show what a transaction will do, it’s safer to stop. I’d also double-check token approvals, because unlimited permissions are easy to overlook and can create much bigger risks later.