Identify the request before signing
ERC-4361 describes a standard message for signing in to an off-chain service. Its fields include the requesting domain, the account and the chain ID. Check that the request belongs to the site you intended to use rather than relying only on a sign-in label.
Notice the session information
The standard includes a nonce and issue time, with optional timing limits such as an expiration time. These are part of the authentication request, not a transaction’s payment amount. If the origin or purpose is unclear, stop and verify through the service’s official route rather than signing to dismiss the prompt.
A scanner lookup does not require this step
coinscammercheck currently advertises address-only lookup without connecting a wallet. A message asking you to sign in elsewhere is a separate action, not an unavoidable scanner requirement. Source checked 2026-10-23: ERC-4361, Sign-In with Ethereum, https://eips.ethereum.org/EIPS/eip-4361 . A recognised format does not certify that the requesting business is trustworthy.