Observed arrival · 2026-09-30
The fake MetaMask security alert
Credibility concern recorded. The source reference remains available for verification and correction.
A MetaMask-impersonating page uses an unfamiliar-device warning to solicit a wallet recovery phrase, exchange details, and contact information.
- For
- MetaMask wallet holders checking an unfamiliar-device alert
- Worth noticing
- The page escalates from a purported Germany device alert to requests for a 12-word phrase, exchange details, and an asset-risk level.
Field notes
The flow begins with a purported Macintosh login from Germany and asks visitors to confirm whether they recognize the device. It then moves through recovery-phrase, exchange, and contact forms, with a risk selector split at $10,000 in crypto assets. The page displays success messages, but the extracted evidence does not establish that a wallet was restored or that any security request reached an exchange.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue