Typosquatting

Typosquatting is the registration of names that differ from a legitimate one by a plausible mistake, so that people who mistype, misread or click a prepared link arrive somewhere an attacker controls. In crypto it appears in three places at once. Domains carry the classic form, including characters from other alphabets that render identically to Latin ones, which makes the substitution invisible in a browser bar. Application listings carry it as near-identical wallet and exchange apps, matched icons included. Software registries carry it as packages named one character away from a widely used library, which is how a developer's build ends up shipping code that reads keys. The defence in each case is the same and is not visual: reach the destination by a route you established yourself — a saved bookmark, a link from an official account you already verified, a package name copied from documentation — rather than by search, message or memory.