nav_phishing

Is Matcha safe? How to verify you are on the real site

You are about to connect your wallet to Matcha. Before you do, it is worth taking ten seconds to make sure you are on the real site and not a look-alike built to drain your wallet.

The real Matcha

The official Matcha address is matcha.xyz (DEX, multi-chain). Any other domain claiming to be Matcha — with extra words, swapped letters, or an unusual ending — should be treated as a phishing risk.

Why Matcha gets cloned

Because Matcha asks you to connect a wallet and sign transactions, it is a target for phishing. Attackers copy the site pixel for pixel, then trick you into signing an approval that hands them your assets. The clone often ranks in ads or is shared as a link in Discord and Telegram.

How to stay safe on Matcha

Verify the domain is exactly matcha.xyz. Never reach it through a random link or ad. Read every signature request before approving. Never enter your seed phrase. Use a tool that blocks known fakes and explains dangerous signatures before you sign.

FAQ

Is Matcha legit?

Matcha is a real DEX service at matcha.xyz. The danger is not the real site but phishing clones that copy it to steal wallet approvals.

What is the official Matcha website?

The official site is matcha.xyz. Bookmark it and avoid reaching Matcha through ads or shared links.

How do I know if a Matcha site is fake?

Check the exact domain, be suspicious of extra words or odd endings, and never sign a request you do not understand. Trust Line blocks known Matcha phishing clones automatically.

Privacidad por diseño

Trust Line is a free browser extension that blocks fake versions of sites like this before they load and warns you about dangerous signatures on any site.

Añadir al navegador — gratis