Four prompts worth separating
| Prompt | What to check |
|---|---|
| Connect | The site requesting your public address. |
| Sign a message | The domain, message, wallet and stated purpose. |
| Approve token spending | The spender, token, amount and whether it is unlimited. |
| Send a transaction | The network, destination, value, action and network fee. |
A message signature can authorize meaningful actions in other systems, so “not a transaction” is not the same as harmless. Read the full request and reject anything you do not understand. Ethereum’s security guide covers common wallet scams.
What the CRSN member flow should ask for
The member page asks you to sign in, connect a wallet and approve a readable membership message. The site verifies that message and reads your token balance. It does not need a token allowance, a transfer to a “verification wallet,” or your recovery phrase to issue a badge.
The official member address is crsn.network/members/. Compare the complete domain in your browser. A message sent by someone claiming to be support does not change the site’s requirements.
A name or icon is not proof
Token symbols can be copied. For CRSN, compare the entire contract address against the official reference. Do the same when opening a trading link. A balance lookup never needs a private key.
Community messages are written by other members. A badge indicates balance eligibility, not expertise, identity verification, or authority to handle anyone else’s funds. The project owner has a distinct label in room messages; still read every wallet request for yourself.
If something feels wrong
Stop before approving the next action. Close the suspicious page and navigate directly to the known domain. Keep a transaction hash or a screenshot of an error if it contains no secrets. Use the wallet provider’s official help channel rather than a direct message from an unknown account.
If a message in a CRSN room looks like impersonation or a wallet scam, report it. Never paste a recovery phrase into a report. The owner can remove the message and restrict its sender, but cannot reverse Ethereum transactions or recover a lost wallet.
A habit that works across the site
Before taking an action, say what you expect it to do: “I am proving ownership,” “I am reading a balance,” or “I am swapping these tokens.” If the wallet preview describes a different action, cancel and investigate. The knowledge check gives you a few practice scenarios without connecting a wallet.
CHECK YOUR UNDERSTANDING
Should a CRSN badge verification ask for unlimited token spending?
Choose an answer. This is a learning exercise, not a badge requirement.