nav_phishing

Fake Matcha sites and how to spot them

Fake Matcha sites look identical to the real one. The difference is in the domain and in what they ask you to sign. Here is how to tell them apart before you lose funds.

How fake Matcha sites work

A phishing clone of Matcha copies the exact look of matcha.xyz. When you connect your wallet, it asks you to sign a transaction or approval that is actually a drainer. Once signed, your tokens or NFTs are gone.

Red flags of a fake Matcha

A domain that is not exactly matcha.xyz. Extra words like "claim", "airdrop", or "connect". A pop-up asking for your seed phrase. A signature request you do not understand. Pressure to act fast.

How Trust Line protects you

Trust Line checks every domain against known Matcha phishing lists and blocks fakes before they load. On any site, it decodes the signature you are about to make and warns you if it is dangerous — before you approve.

FAQ

How do I spot a fake Matcha site?

Check that the domain is exactly matcha.xyz. Fakes use look-alike domains and ask you to sign dangerous approvals. Trust Line blocks known clones automatically.

What happens if I connect to a fake Matcha?

A fake site tries to make you sign an approval that lets it move your assets. If you signed on a phishing site, revoke approvals immediately and move funds to a safe wallet.

Trust Line does the checking for you

Trust Line is a free browser extension that blocks fake versions of sites like this before they load and warns you about dangerous signatures on any site.

Add to browser — free