Technical Definition

Ice Phishing

Ice phishing is a crypto-specific scam that abuses token approvals or delegated permissions rather than directly stealing private keys.

By Crypto University Editorial
PhishingWallet DrainerPrivate Key

✦ Key Insight

Recognizing Ice Phishing can help users detect suspicious requests earlier and avoid signing, approving, installing, or paying into an attacker-controlled flow.

✕ Common Misconceptions

Do not rely on branding, screenshots, caller identity, transaction previews, or search results alone. Verify official domains, contract addresses, permissions, and wallet prompts independently.

Detailed Explanation

Ice phishing is a crypto-specific scam that abuses token approvals or delegated permissions rather than directly stealing private keys. Attackers may combine this technique with phishing, malware, stolen credentials, or misleading wallet prompts.

In Practice

“A user encounters signs of Ice Phishing when a website, wallet prompt, support message, software update, or smart-contract interaction behaves unexpectedly.”

Dig Deeper

Smart Contract

A smart contract is blockchain-deployed code that can hold state and execute predefined rules when called.

Private Key

The secret number that authorises spending from a crypto address.

Phishing

Fake sites, emails or messages built to trick you into revealing credentials or signing a malicious transaction.

Token Approval

Permission you grant a smart contract to move a specific token from your wallet on your behalf.

Wallet Drainer

Malicious code on a website that empties a connected wallet once the user signs its transaction.