New Phishing Trick Targeting MetaMask Wallet Users
A new phishing bot is tricking users via fake support forms hosted on Google Docs—don’t share your recovery phrase.
- Scam impersonates MetaMask support, sending malicious links disguised as “help forms.”
- They lure users to Google Docs or sheets to enter sensitive data, like recovery phrases.
- MetaMask explicitly states it never uses Google Docs for support and urges using official support channels.
How This Scam Works
According to the MetaMask team, a phishing bot is impersonating support by sending tweets or messages with links to what appear to be “support forms.” These forms often live in Google Docs or Sheets, making them harder to block. Users are asked to provide their secret recovery phrase under the guise of verification or assistance.
Some users have reportedly fallen victim by trusting these forms, thinking they were legitimate support processes. Once a phrase is submitted, funds can be drained immediately.
Official Response & Safe Channels
MetaMask publicly denied ever using Google Docs or Sheets for support. Their official guidance is to exclusively use the “Help” section within the MetaMask app and report phishing via app tools. They advise extreme caution when a third party requests your recovery phrase or private keys.
Protect Yourself: Red Flags & Best Practices
- Never enter your recovery phrase in forms, even if they look legitimate.
- Check sender profiles—often fakes will have few followers or odd usernames.
- Access support only through the official MetaMask app or website.
- Enable basic security measures: use hardware wallets, keep software updated, and verify links manually.
If you suspect you’ve been targeted, act quickly—move funds to a new wallet and report the incident.
🚨PHISHING ALERT!: a new type of phishing bot is becoming active. 🎣
— MetaMask.eth 🦊 (@MetaMask) May 3, 2021
👨🏻Comes from an account that looks “normal” (but few followers)
📑Helpfully suggests filling out a support form on a major site like Google sheets (hard to block).
🪝Asks for your secret recovery phrase. pic.twitter.com/EeHumnmzbE
Comments
Post a Comment