Account Takeover Scams Impersonating MetaMask Support
Fraudsters posing as MetaMask support agents use social engineering, remote access requests, and fake synchronization screens to gain control of victims' wallets and drain funds.
Part of: Account Takeover Scams
Last reviewed: 8 June 2026
Because MetaMask is a browser-based wallet, many users assume there is a traditional support team that can help them recover access or resolve issues — similar to a bank or exchange. Scammers exploit this assumption by creating fake MetaMask support channels on Twitter/X, Telegram, and Reddit, where they respond to users experiencing real wallet problems.
The scammer builds trust by appearing knowledgeable, using technical jargon, and offering step-by-step help. Eventually, the 'fix' involves either sharing the Secret Recovery Phrase, granting remote desktop access to the attacker, or visiting a fake 'MetaMask Sync' portal that harvests wallet credentials or prompts a malicious transaction signature.
MetaMask's actual support operates at support.metamask.io. The MetaMask team does not reach out to users via Twitter DMs, Telegram, or Discord to offer assistance. Any person who messages you first claiming to be MetaMask support is not from MetaMask.
How this scam works on the MetaMask brand
A user posts in a crypto forum or tweets that their MetaMask is not connecting or they have lost access. Within minutes, multiple accounts claiming to be MetaMask agents reply. The agents ask the user to move the conversation to a private channel. There, they walk the user through a diagnostic process that progressively escalates requests.
The attack typically culminates in one of three scenarios: the victim is asked to share their SRP to 'resync the wallet,' the victim is directed to a fake MetaMask support site that asks for the SRP, or the victim is persuaded to install a remote-access tool (AnyDesk, TeamViewer) so the 'agent' can 'fix the issue.' In the remote-access scenario, the attacker visually navigates to the MetaMask extension, clicks 'Reveal Secret Recovery Phrase,' and records it.
Real MetaMask support never requests a Secret Recovery Phrase, never asks for remote access, and all genuine troubleshooting steps are documented publicly at support.metamask.io.
Common red flags
- Support contact reached out to you first on social media rather than you initiating contact through support.metamask.io
- Agent asks for your Secret Recovery Phrase or private key as part of any troubleshooting step
- Agent requests that you install remote desktop software (AnyDesk, TeamViewer, Anydesk)
- Agent directs you to a 'MetaMask Sync' or 'MetaMask Verification' URL outside metamask.io
- Multiple accounts independently responding to your public post, all offering similar help
- Agent is unusually persistent, escalating urgency, or threatening permanent wallet loss if you do not act now
How to protect yourself
- Always initiate MetaMask support through support.metamask.io — never through social media replies
- Understand that no legitimate MetaMask support step will ever require your Secret Recovery Phrase
- Do not install remote access software at the request of anyone claiming to help with wallet issues
- Keep your SRP written down in a physical location only — never in digital form where screen sharing could expose it
- Dismiss any unsolicited DMs claiming to be MetaMask support without engaging
How to report it
- Report fake MetaMask support accounts to the social platform (Twitter/X, Telegram, Reddit) using the platform's report-spam function
- File a report at support.metamask.io so the MetaMask team can monitor and warn others
- Report to IC3.gov (US) or Action Fraud (actionfraud.police.uk) in the UK if funds were lost
- Document all conversations and transaction hashes before reporting — they form the evidence trail
Frequently asked questions
Does MetaMask have live chat or phone support?
MetaMask support operates exclusively through a ticket-based system at support.metamask.io and community resources like its documentation site. There is no live chat, phone number, or official social media DM support channel.
Why do so many accounts respond to my MetaMask problem post so quickly?
Scammers use automated tools and keyword monitors to detect posts mentioning MetaMask issues. They respond quickly to be first, appearing helpful. The speed of response is not evidence of legitimacy.