I agree that people should never blindly connect their wallet or approve transactions. That's good advice. But that's not what's happening here. The wallet isn't being connected to Telegram, and the portal isn't asking users to send funds from their wallet. The wallet is only used to verify the receiving address so the portal knows where to deliver the CashTokens. The transfer is sent to the user's wallet, and the service pays the BCH network fee. I designed it this way because simply asking users to paste an address would make voucher redemption easier to abuse through guessed or intercepted codes. That said, your comment made me realize the wording could be clearer. I'll be changing the button from "Connect Wallet" to "Verify Receiving Wallet" since that's a better description of what it's actually doing. I appreciate you pointing out the potential confusion. Wallet security is something we should all take seriously.