Loading article…
MetaMask rolled out new in-wallet safeguards against crypto scams, including real-time alerts and transaction simulations, after $1.7B was lost to scams in
MetaMask has implemented new in-wallet safeguards across its browser extension and mobile applications to combat crypto scams, introducing real-time alerts and transaction simulations to flag suspicious activity before users confirm transactions [1, 2]. This update aims to reduce user losses, which totaled over $1.7 billion from scams in 2023, following $3.7 billion in 2022 and over $3 billion in 2021 [5].
| At a glance | |
|---|---|
| Feature | Real-time alerts, transaction simulations [1] |
| Target scams | Phishing, unauthorized transactions, romance, investment [1, 3] |
| Availability | MetaMask Mobile (v8.11+), Extension (v13.48+) [3] |
| Context | $1.7 billion lost to crypto scams in 2023 [5] |
The new features integrate directly into MetaMask without requiring additional setup, targeting common decentralized finance (DeFi) fraud attempts such as phishing and unauthorized token approvals [1, 2]. When decentralized applications (dApps) request token approvals or complex transactions, MetaMask now displays clearer warnings and flags risky sites [2]. This includes explicit details about the scope and permanence of token allowances, highlighting unusually large or unlimited allowances, and warning if destination contracts or websites match known scam patterns [2]. For transactions involving token swaps or transfers to unfamiliar addresses, users receive prompts to verify recipient details before confirmation [2].
MetaMask's security partner, Blockaid, contributes to these protections by flagging malicious destination addresses [3]. The system uses AI, including large language models (LLMs) and classification models, to analyze content across websites and social feeds, alongside static and dynamic analysis of on-chain bytecode and transaction flows, to identify phishing and scam behavior in real-time [4]. This allows MetaMask to warn users about potential scams before funds are sent [4].
A key focus of the update is to counter investment and romance scams, which often rely on building trust rather than technical exploits [3]. These social engineering scams were tied to $7.2 billion in crypto losses in the U.S. alone in 2025, according to the FBI's Internet Crime Complaint Center (IC3) [3]. Traditional security tools often fail to detect these scams because they involve users willingly making transfers [3].
To address this, MetaMask now introduces a "security speed bump" for transfers that show signs of romance or investment scams [3]. Instead of outright blocking transactions, the wallet presents users with a series of questions designed to surface red flags, such as whether they have met the recipient in real life, if guaranteed returns were promised, or if they are being rushed [3]. This approach aims to give users a moment to reconsider without fully preventing them from proceeding if they accept the risks [3]. Martin Peko, Staff Product Manager at MetaMask, noted that investment scam victims often ignored warnings, suggesting a need for different controls when users trust the recipient or are being coached [4].
The new safeguards also include warnings for lookalike wallet addresses and transfers to first-time recipients [4]. A separate feature, "Added Protection," automatically reverts transactions that do not match their previews, launching first on the browser extension with mobile support planned [4].
The rollout of these enhanced protections reflects an industry-wide effort to improve user security against increasingly sophisticated fraud, particularly as authorities continue to pursue services supporting investment and romance fraud [4].
Coverage is mostly measured — 216 of 218 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 5 outlets · Sep 15, 2026 · How we report
As of 14 September 2026, the Peru Ministry of Economy and Finance reported that its official X account was compromised by attackers who used the platform to promote a fraudulent token called $HYLO. The ministry confirmed the posts were unauthorized and stated that no financial losses were reported in connection with the incident.
The Revolut data disclosure, reported in September 2026, involved the release of customer full names, birth dates, occupations, postal addresses, email addresses, and telephone numbers. Additionally, the impersonator obtained copies of passports or driving licenses, verification selfies, IBANs, and complete Bitcoin transaction histories.
MetaMask utilizes AI-powered security partners like Blockaid to analyze websites, social feeds, and on-chain bytecode to identify phishing and malicious behavior in real time. The wallet also employs Added Protection, a feature that automatically reverts transactions that do not match their previews, and provides warnings for lookalike addresses and first-time recipients.
Scammers exploit government accounts because these platforms command high levels of public trust, which can be used to legitimize fraudulent schemes. By posting on official channels, perpetrators can more effectively use urgency—such as fake token launch dates—to bypass the critical thinking of potential victims.