Connect, sign, approve: reading Phantom pop-ups on pump.fun

• 1. The connect request
• 2. The sign-in message
• 3. The transaction approval
• Habits that limit damage
• Further reading

Disclosure: I run PumpFunReferralCode.vip, an independent guide to the pump.fun invite code SAVE100. The site uses a referral link, so I may benefit if you sign up through it. Not affiliated with pump.fun. Not financial advice.

When you use pump.fun with a Phantom wallet, three different kinds of pop-up appear. They look similar, but they ask for very different things. Knowing which is which is one of the simplest ways to avoid a wallet drainer.

§1. The connect request

This asks permission for the site to see your public address and request actions later. It does not move funds. Before approving, check that the site name shown in Phantom is exactly pump.fun. If it shows anything else, close the pop-up and the tab.

§2. The sign-in message

Pump.fun may ask you to sign a plain text message to log in. Signing a message is not a payment, but read the text anyway. A login message should say something like “sign in” and include a nonce or a time. It should never mention transferring tokens, approving spending, or “verifying” your wallet for an airdrop.

§3. The transaction approval

This is the one that moves money. Phantom shows an estimate of what will leave your wallet and what you should receive. Check:

• the amount of SOL leaving matches what you typed,
• the token you receive is the coin you meant to buy (compare the contract address if unsure),
• the network fee looks normal, not wildly higher than usual,
• there are no extra, unexplained token transfers in the simulation.

If Phantom shows a warning that a transaction could not be simulated, or flags the site as malicious, treat that as a stop sign.

§Habits that limit damage

• Use a separate wallet for memecoins with only the SOL you are willing to risk.
• Open pump.fun from a bookmark, never from replies or DMs.
• Review your connected apps in Phantom now and then and revoke sites you no longer use.

§Further reading

• Step-by-step buy flow: How to buy on pump.fun with a Phantom wallet
• Wallet setup: How to set up a Solana wallet for pump.fun
• Risk overview: Is pump.fun safe?

Risk warning: memecoins are highly speculative and volatile, and most lose most of their value. Only use money you can afford to lose. A single malicious approval can empty a wallet.