Just now I almost slipped up and connected my wallet on a "Testnet Points Dashboard"... The page looked just like the real one, and it even prompted you to sign an authorization, which basically means they want to use your frequently used address for their own purposes. I don't know if the mainnet will actually issue tokens, but it's not worth revealing your seed phrase or granting unlimited permissions just for that small expectation. My bottom line is twofold: never put your seed phrase into a webpage/chat box; always refuse signatures you don't understand, even if it means missing out on incentives. Don't let the daily chart scare the market, and don't let points lure you away from safety—stay alive first, then talk about opportunities.