Protect your wallet
How to spot fake MetaMask sites
MetaMask is a popular wallet, which makes it a frequent target for phishing. The only official domain is metamask.io. Everything else claiming to be MetaMask should be treated as suspicious.
Common fake MetaMask tricks
Look-alike letters
Domains that swap letters for similar characters, so metamask.io becomes something that looks identical at a glance.
Brand in a sub-part
Putting “metamask” in a subdomain or path of a domain the brand doesn't own, e.g. metamask.claim-xyz.top.
Bait pages
“Claim your MetaMask airdrop”, “restore MetaMask wallet”, “verify MetaMask account” — urgency to make you connect fast.
Checklist before you connect
- Confirm the domain is exactly metamask.io — character by character.
- Check for a padlock and no “xn--” prefix in the address bar.
- Never sign a request you don't understand — especially unlimited approvals.
- Use a security extension that flags fake MetaMask domains automatically.
Trust Line catches fake MetaMask sites for you
Trust Line compares every domain you visit against MetaMask's real address using on-device heuristics, and blocks impersonators before they load.
Adicionar ao navegador — grátis