imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Token Approvals

Understand approval targets, allowances, duration and revocation so long-lived permissions do not go unnoticed.

On this pageCore security principleWhere risk appearsHow to identify a risky requestWhat to doSecurity checklist

Core security principle

For Token Approvals, the practical question around 授权对象 is not where a button appears, but what permission or network state it represents, how that state can be verified, and what an unexpected result would mean.

Seed phrases and private keys represent account control and should remain under the user’s custody. No support process should require them, and verification codes should not be shared either.

The important concepts on this page include 授权对象, 额度, Approve, 取消授权. Use them as a decision framework: verify the source and network first, review the exact request second, then confirm the on-chain result after submission.

Where risk appears

For Token Approvals, the practical question around 额度 is not where a button appears, but what permission or network state it represents, how that state can be verified, and what an unexpected result would mean.

Risk commonly appears through fake domains, malicious signatures, oversized approvals, compromised devices or replaced transfer details. A familiar visual design does not replace verification.

The important concepts on this page include 授权对象, 额度, Approve, 取消授权. Use them as a decision framework: verify the source and network first, review the exact request second, then confirm the on-chain result after submission.

A repeatable review order

  1. Identify the network and account.
  2. Check the destination, contract or application source.
  3. Review the amount, fee and permission details.
  4. Confirm only when the request matches your intended task.
  5. Use on-chain data to verify the result.

How to identify a risky request

For Token Approvals, the practical question around Approve is not where a button appears, but what permission or network state it represents, how that state can be verified, and what an unexpected result would mean.

Evaluate a request by asking what permission it needs, who receives it and whether it matches the current task. Unknown contracts, unreadable requests and time pressure are reasons to stop and check again.

The important concepts on this page include 授权对象, 额度, Approve, 取消授权. Use them as a decision framework: verify the source and network first, review the exact request second, then confirm the on-chain result after submission.

What to do

For Token Approvals, the practical question around 取消授权 is not where a button appears, but what permission or network state it represents, how that state can be verified, and what an unexpected result would mean.

If you suspect a problem, stop signing or sending, review existing approvals and consider whether recovery material may have been exposed. Confirmed on-chain transfers generally cannot be reversed by the wallet alone.

The important concepts on this page include 授权对象, 额度, Approve, 取消授权. Use them as a decision framework: verify the source and network first, review the exact request second, then confirm the on-chain result after submission.

Security note: imtoken will never ask for a seed phrase, private key or verification code. Third-party DApps and smart contracts can carry independent risks.

Security checklist

For Token Approvals, the practical question around 授权对象 is not where a button appears, but what permission or network state it represents, how that state can be verified, and what an unexpected result would mean.

Seed phrases and private keys represent account control and should remain under the user’s custody. No support process should require them, and verification codes should not be shared either.

The important concepts on this page include 授权对象, 额度, Approve, 取消授权. Use them as a decision framework: verify the source and network first, review the exact request second, then confirm the on-chain result after submission.

  • Confirm the network before acting
  • Review the full address or contract target
  • Read signature and approval details
  • Keep recovery material offline and private
  • Use a transaction hash to verify results
Risk reminder: On-chain transactions, third-party DApps, smart contracts, staking services and digital-asset markets may involve independent risks. Staking does not guarantee returns, and exits may take time.