Fake Wallet Extension Warning

Safety Notice

Installing a fake wallet extension can expose wallet recovery information or lead to unauthorized wallet access. Do not install from a chat, ad, direct message, copied website, or file sent by another person. Never enter a seed phrase, Secret Recovery Phrase, or private key into a website.

What Official Guidance Confirms

MetaMask states that imitation websites and profiles may try to steal access, and that its browser extension should be reached through its official download page or an official browser extension store. Its installation guide also warns that cloned versions may be designed to capture a Secret Recovery Phrase.

These statements verify MetaMask's current distribution guidance. They do not verify another wallet's publisher, store listing, or installation process.

Google Chrome separately tells users to review extension permissions and approve only extensions they trust. A store listing or browser warning is one check, not proof that a wallet product is legitimate.

Common Pattern

A copied site, search ad, social reply, or private message directs the user to an imitation extension. The name, logo, screenshots, and description may look familiar. The fake extension may then ask the user to create, restore, verify, or synchronize a wallet.

Before Installing

1. Stop using the link that introduced the download.
2. Find the wallet's official website through a source you independently trust.
3. Use the official site's installation link to reach the correct browser store.
4. Compare the complete domain, extension name, publisher details, requested permissions, and recent official instructions. A familiar logo or high download count alone is not proof.
5. Do not sideload or install an unpacked extension unless you understand the technical and security consequences and the wallet's official documentation requires that method.

Stop Conditions

• The download came from a direct message, support reply, unknown ad, file-sharing page, or shortened link.
• The site or extension asks for a seed phrase merely to verify, unlock, synchronize, or update a wallet.
• The official wallet site does not link to that store listing.
• The publisher details or requested permissions do not match current official instructions.
• Sources conflict or you cannot verify the destination. Close the page and do not install.

Safer Response

If you already installed an unverified extension, stop using it and follow the wallet provider's official security or support instructions from an independently verified site. Do not accept private recovery help and do not disclose recovery information.

This article is not investment advice and cannot guarantee that an extension is safe.

Official Sources

• MetaMask: How to verify the real MetaMask wallet.
• MetaMask: How to install MetaMask.
• Google Chrome Help: Install and manage extensions.

The source URLs are stored in sourceLinks frontmatter for editorial verification.