MetaMask Users Targeted by Fake 2FA Scam

SlowMist’s Chief Security Officer recently flagged a new phishing scam that targets MetaMask wallet owners by copying official security alert pages to steal mnemonic seed phrases. The scam starts with a forged MetaMask alert and leads users through a fake two‑factor authentication flow that includes a countdown timer and looks urgent and legitimate. Victims are eventually asked to enter their wallet recovery phrase, which attackers then use to access and drain funds from the wallet. MetaMask never asks for seed phrases on websites, so always check the URL and avoid entering sensitive information.