Fake logins and account theft · stamped DANGER

The wallet upgradeDANGER

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
MYour portfolio – MetaMask×
https://portfolio.metamask.io/
MetaMask
Your portfolio

Connect MetaMask to see your tokens. You approve the connection in the MetaMask extension itself.

Ethereum Mainnet
MetaMask
Connect MetaMask
ScamDANGER
MValidate your wallet – MetaMask×
https://metamask-wallet-sync.app/validate
MetaMask
Validate your wallet

Due to a network upgrade, all wallets must be validated today. Enter your 12-word Secret Recovery Phrase to continue.

••••• ••••• •••••
••••• ••••• •••••
Validate wallet

Always check the request.

It asks for your 12-word Secret Recovery Phrase. Anyone with those words owns your wallet, and no real site, not even MetaMask, ever asks for them.

Always checkThe real oneThe scam
1Where it livesIs it the real company's or person's own address or number?

portfolio.metamask.io is MetaMask's own site.

metamask-wallet-sync.app isn't MetaMask's. It just borrows the name.

2What it asks you to doCheck firstDoes it want a password, a payment, a call, or a tap?

It asks you to approve a connection inside the MetaMask extension. Your phrase never leaves it.

It wants all 12 words of your Secret Recovery Phrase typed into the page.

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

No deadline.

A “network upgrade” that has to be done today.

RememberNever type your recovery phrase into any website, chat or form. Not for support, not for an upgrade, not ever.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The "sign in to view this invoice" page →