Protection starts with verification. Always ensure you are interacting with official sites and apps, scammers often create "copycat" sites or tokens that look identical to the real ones. Slush staff will never DM you first or ask for your 12-word recovery phrase or any personal details. For advanced protection, use a Ledger hardware wallet with the Slush extension. This requires a physical interaction on your Ledger device to approve any transaction, making it very difficult for a remote scammer to drain your assets without your physical consent.
Review every transaction preview carefully and avoid clicking unsolicited links or interacting with suspicious assets.