Use a dedicated low-balance casino wallet, verify the official domain and inspect every requested instruction. Never disclose a seed phrase or private key to a casino, tool or support agent.
Separate gambling from long-term holdings
Create a dedicated wallet with only the amount needed for the planned session and network fees. This limits exposure if a site, approval or device is compromised.
Move unused funds back to a separately secured wallet instead of treating a connected dapp account as storage.
Read before signing
A connection request and a transaction signature are not the same permission. Check the destination, token, amount, program and any additional instructions shown by the wallet.
Reject an unexplained approval, blind signature or request reached through a copied advertisement or direct message.
Verify the complete domain
Bookmark the official site after independent verification. Lookalike domains can copy branding and replace a legitimate wallet prompt with a malicious transaction.
Solana's wallet guidance recommends checking the provider's official domain, custody and recovery model and testing with a small amount.
Keep useful records without exposing secrets
Store transaction signatures, dates and redacted screenshots for payment disputes. A public address or transaction signature is not a recovery secret, but it can expose account activity.
Never send a seed phrase, private key or wallet backup. Authentic support does not need these to inspect an onchain transaction.