A new phishing scam has been circulating that specifically targets MetaMask wallet users. Here's what you need to know: The attackers create a spoofed security alert page that mimics MetaMask's official interface. When victims click through, they're directed to a fake two-factor authentication verification flow. The ultimate goal? Stealing your seed phrase—basically getting full access to your wallet and all your crypto assets.

This type of attack works because it exploits our natural instinct to respond quickly to security warnings. Users see what looks like a legitimate alert from MetaMask and panic-click without verifying authenticity. The fake 2FA page looks convincing enough to trick most people into entering sensitive information.

Protect yourself: Never click links in unexpected security alerts. Always navigate directly to MetaMask through your browser bookmarks or by typing the URL manually. Your seed phrase should NEVER be entered anywhere online, period. If you receive a verification prompt you didn't initiate, it's almost certainly malicious. Stay vigilant out there.