What is MetaMask Email SCAM?
MetaMask Email Scam is a social-engineering scam that aim to manipulate people into turning over sensitive data such as MetaMask seed phrases, secret recovery phrases and account passwords. It claims your MetaMask account is not verified, and you need to provide personal information or click on a link to verify it. That gives the scammers means to steal your money or identity or to infect your device with malicious software.
It is important to emphasize that these MetaMask verification emails do not come from anyone affiliated or connected to MetaMask and should be regarded as fraudulent.
The MetaMask Wallet verification email message is a SCAM
QUICK LINKS
The MetaMask Email scam contains a text message, which the scammers try to pass off as legitimate. It states that MetaMask is requiring all users to verify their wallets in order to comply with the new KYC regulations. Scammers trick victims into verifying their wallets by clicking on the “Verify your wallet” button in the message. This scam message invites recipients to complete the verification as soon as possible, otherwise their wallet will be restricted.
Text presented in the scam message:
METAMASK
Metamask requires all users to verify their wallets in order to comply with KYC regulations this must be done before 19/11/2021 as a regulated financial services company, we are required to verify all wallets on our platform. We require all customers to verify their wallets to continue using our service.
What if I don’t complete the wallet verification?
If you don’t verify your wallet, your wallet will be restricted.
Verify your wallet
If the button above doesn’t work, try the page below.
[fake METAMASK link]
For further assistance with this issue, please contact our support team here.
As we said above, these scam emails contain a button, clicking on which redirects users to a fake MetaMask page where users must enter their personal information and MetaMask wallet details. Obviously, in this way, scammers try to obtain personal data of users and information about their MetaMask account (such as seed phrases, secret recovery phrases, private keys). This information can be used to make unauthorized transfers, sold to criminals on the dark web, or other malicious purposes. Moreover, the criminals behind this scam can use stolen email addresses and phone numbers to send spam and malspam (spam emails containing malware or links to malware).
Threat Summary
| Name | MetaMask Email Scam, Fake MetaMask email |
| Type | Phishing, Scam, Social Engineering |
| Fake claims | “Metamask requires all users to verify their wallets in order to comply with KYC regulations”, “If you don’t verify your wallet, your wallet will be restricted” |
| Distribution methods | Email spam campaigns |
| Removal | Links in scam messages can lead to sites or files with viruses or other malicious content. To scan your device for viruses, find and remove malware, we recommend using the steps below. |
The MetaMask Email scam spread through email spam campaigns. Cybercriminals usually use botnets for massive email spam campaigns to direct victims to scam sites, advertise pharmaceutical products, adult content, and malware distribution. In some emails, scammers use threats to intimidate and bully a victim into paying, others contain links to malicious files. Your subscription for Norton Protection has been renewed, I have to share bad news with you, and DPD Delivery Email are some of the scam emails we reported recently.
What to do when you receive the MetaMask Email SCAM
We advise everyone who receives this message to follow a few simple steps below. If you receive such messages regularly, then this may be a sign that there is adware, trojan or spyware on your device. In this case, you need to scan the device for malware, remove unnecessary and suspicious apps.
- Do not believe this message.
- NEVER share your secret seed phrases, secret recovery phrases.
- If there’s a link in the scam message, do not click it.
- NEVER enter MetaMask seed phrases (secret recovery phrases) into any website online.
- Report the email spam to the FTC at https://www.ftc.gov/
- Scan your device for malware.
- Install an anti-phishing software.
How to scan your computer for malware
If you suspect that your computer is infected with spyware, you accidentally clicked on a link in the scam email, or just want to scan your computer for malware, then use one of the best free malware removal tools. One of these utilities is Zemana Anti Malware. It is a lightweight utility which designed to use alongside your antivirus software, detecting and removing malicious software, adware and PUPs that other security tools miss. Zemana Anti Malware is easy to use, fast, does not use many resources and have great detection and removal rates.
First, visit the page linked below, then click the ‘Download’ button in order to download the latest version of Zemana AntiMalware.
154660 downloads
Author: Zemana Ltd
Category: Security tools
Update: July 16, 2019
Once the downloading process is done, close all windows on your personal computer. Further, open the install file called Zemana.AntiMalware.Setup. If the “User Account Control” prompt pops up as on the image below, press the “Yes” button.
It will display the “Setup wizard” that will assist you install Zemana on the personal computer. Follow the prompts and do not make any changes to default settings.
Once installation is done successfully, Zemana will automatically run and you can see its main window as shown below.
Next, press the “Scan” button to perform a system scan with this utility for malware. While the Zemana utility is scanning, you can see number of objects it has identified as being infected by malware.
After the scanning is done, the results are displayed in the scan report. Make sure all threats have ‘checkmark’ and click “Next” button.
The Zemana AntiMalware will delete malicious software. Once the process is complete, you can be prompted to restart your PC.
Finish words
We hope this article helped you understand that the “MetaMask wallet verification” email is a scam. If you receive an email that is similar but not the same as the example above, make sure you remove any personal info in this message, then post it as comment on this article. It will help our team monitor the latest scams.
