The summary.
THERE IS NO ACCOUNT, NO OWNER RECORD AND NO AUTHORITY WHO CAN RESTORE ACCESS
Possession of the private key is ownership. Losing it means permanent loss; sharing it means immediate and irreversible theft.
NOBODY LEGITIMATE WILL EVER ASK FOR YOUR RECOVERY PHRASE
Every such request, without exception, is an attempt to steal from you.
NEVER STORE A RECOVERY PHRASE DIGITALLY
Not photographed, not in cloud storage, not in a note. Write it physically, keep copies in separate places, and test recovery with a small amount before relying on it.
VERIFY THE FULL ADDRESS, NOT THE FIRST AND LAST CHARACTERS
That shortcut is exactly what clipboard malware and address poisoning anticipate. Never copy an address from transaction history, and send a small test first for large amounts.
CHECK THE NETWORK AS WELL AS THE ADDRESS — sending on the wrong one usually loses the funds.
NEVER SIGN A MESSAGE OR TRANSACTION YOU DO NOT UNDERSTAND
Signatures can authorise transfers without an obvious transaction, and broad approvals let an application drain holdings later. Review and revoke them periodically.
