WalletConnect Drain Scam
If you received a social media ad that looks like a crypto site asking you to connect your wallet via WalletConnect, you are looking at one of the most repeated scam patterns of the year. These messages succeed because they impersonate something familiar and pile on urgency, pushing you to get you to sign a setApprovalForAll or unlimited token allowance before you have time to verify with the real source.
The real MetaMask does not contact customers this way - and even when MetaMask does send you a legitimate notice, you can always confirm by reviewing every wallet signature in detail before approving and using a separate burner wallet for new sites instead of acting on the message itself. FakeOrLegit is not affiliated with MetaMask; this guide is independent consumer-safety information.
Below we walk through the warning signs you can check yourself, the exact steps to take if you have already engaged, and the most common follow-up questions we see in our checker.
Warning signs
- The advertiser's name is new or unfamiliar and the linked site was registered recently.
- Prices or offers are dramatically better than the real brand's own site or store.
- Urgency or fear language pushes a deadline within 24 hours. Real organizations almost never time-bomb account actions that fast.
- There is a request for payment, login credentials, a verification code, or sensitive identifiers (SSN, full DOB, full card number). None of these are ever needed to resolve a legitimate notice.
- Spelling, grammar, or formatting is slightly off in places a real brand would catch. Scammers iterate but rarely match design systems exactly.
- The wording matches scam reports posted on Reddit's r/scams or in recent local-news headlines. A quick search of the exact phrase is one of the fastest checks you can do.
- The message references MetaMask but the link or sender is not on MetaMask's official domain. MetaMask-related actions should always be confirmed inside MetaMask's official app or website.
What to do
- Compare prices on the brand's official site. If the gap is impossible, the ad is fake.
- Report the ad to the platform. Repeat reports speed up takedown of the advertiser account.
- Run any link from the message through FakeOrLegit. The checker matches the URL against our heuristics and brand-impersonation database.
- If you already entered credentials, change the password and turn on two-factor authentication immediately. Sign out of all other sessions.
- If you already paid by credit card, dispute the charge with your bank within 60 days. Speed matters, earlier disputes win more often.
- Report to the FTC at reportfraud.ftc.gov. If you lost money, also file a local police report so an official case number exists.
- Watch for follow-up scams referencing the same MetaMask pretext. Scammers often re-contact under a "refund" or "support" persona within 24-72 hours.
FAQ
Run a check now
If a specific link or message triggered this guide, paste it for an instant risk report.
Related guides
Fake MetaMask Airdrop Scam
Fake "airdrop claim" pages drain your wallet by approving a malicious contract. Here is what to know.
Fake Binance Customer Support Scam
Fake Binance support agents on Telegram and Twitter drain wallets. Here is the verification path.
Fake Coinbase Withdrawal Hold Scam
Fake withdrawal-hold messages route you to a scam support number. Here is the pattern.
Fake Kraken Support Call Scam
Fake Kraken support calls target customers right after a login attempt. Here is the script.
Pig Butchering Romance Investment Scam
Long-form romance scams that pivot to a fake crypto investment platform, one of the most damaging scams of the decade.
Disclaimer
FakeOrLegit provides automated risk signals based on publicly observable patterns. We do not guarantee that any site, email, or message is safe or unsafe. Always use your own judgment, and contact the real institution directly to verify any request before sharing personal or payment information.
FakeOrLegit is not affiliated with MetaMask. MetaMask did not send and does not endorse this analysis.