Fake copies of real tokens are everywhere. One habit protects you from almost all of them.
Anyone can create a token and call it whatever they like. There can be dozens of tokens named "Arbitrum" or "Pepe" or the name of whatever is trending — identical name, identical ticker, identical logo — and only one of them is the real one. What tells them apart is the contract address: the unique on-chain ID of that specific token. Buying by name instead of by address is how people end up holding a worthless clone of a real project.
The habit that protects you:
Why this matters to you specifically: a huge share of "I bought a scam" stories aren't sophisticated hacks — they're someone buying a same-named fake because they searched the name instead of confirming the address. Sourcing the contract address from the official channel is a ten-second habit that removes almost the entire category of risk.
Want the right contract confirmed and checked before you buy?