MetaMask Users Face Fake “2FA Verification” Scams Risk
The post MetaMask Users Face Fake “2FA Verification” Scams Risk appeared on BitcoinEthereumNews.com.
Key Points: SlowMist warns of spoofed MetaMask alerts pushing fake 2FA. Countdown timers pressure users into revealing sensitive recovery seed phrases. Entering the seed phrase gives attackers full wallet control instantly. A fresh phishing attack has emerged aimed at stealing wallet seed phrases by masquerading itself as a two-factor authentication (2FA) check process to steal wallet seed phrases among MetaMask users. The fraud, high-profiled by SlowMist Chief Security Officer called 23pds on X, involves falsely displaying safety warnings and countdown timers to find a sense of urgency and fool its victims into disclosing their personal recovery data. 使用相似域名:真:matamask假:mertamask pic.twitter.com/ZEX9ocoBYG — 23pds (山哥) (@im23pds) January 5, 2026 As the research findings of SlowMist show, attackers are distributing spoofed emails and web pages with MetaMask that seem to be official security-related messages. The fake emails purport that the users are supposed to activate 2FA to secure their account, which is not a requirement of MetaMask. After clicking the “Enable 2FA Now” button, the users are redirected to a fake MetaMask interface that should resemble the original one. The counterfeit site has a countdown of verification which gives a misleading urgency. Users are then requested to enter their seed or recovery phrase at the end of the flow and this is supposed to be the end of the 2FA setup. The statement places scammers at the mercy of the wallet and makes them able to transfer all the assets immediately. According to security researchers, MetaMask will never send you unsolicited email or request that you verify your wallets or enter your seed phrases on the Internet. The social engineering tactics, urgency, fear, and authority the scammers seem to be exploiting to manipulate its victims are classic. The fake pages mainly have MetaMasks branding, official-like logos, and professional layout to look valid. Even specific…
Filed under: News - @ January 6, 2026 6:23 am