Follow these checks in order
Inspect the address
Watch for lookalike domains, misleading advertisements and unsolicited installer links.
Prepare the device
Update the OS and browser, remove unknown installers and avoid shared devices.
Review permissions
Stop if an app requests access that appears unrelated to its function.
Complete a first check
Explore create and import options without revealing credentials to anyone offering remote help.
Next step
After each step, verify the public address and network before moving assets.