Is this MetaMask wallet drainer message a scam?
Commonly seen since 2023. Last reviewed 2026-06-05.
Check your exact messageExample only - do not act on it
Example only: MetaMask: validate your wallet to keep it active. Connect and sign here: [fake-link removed]
Why this message is suspicious
- 'Validate/sync your wallet' tricks you into signing a draining transaction.
- Signing the malicious contract approves transfers out of your wallet.
- Wallets don't need you to 'connect and sign' to stay active.
What the scammer wants
- Your wallet seed phrase or a malicious 'connect wallet' signature
- Direct access to drain your crypto in one transaction
- Login details for your exchange account
Common variations
- Example only: Wallet error - reconnect and approve to resync: [fake-link removed].
- Example only: Claim required update by signing this transaction: [fake-link removed]
Red flags to watch for
What to do now
- Stop sending money or signing anything, and leave the chat/group.
- Check security guidance on the wallet/exchange's official site; they will never ask for your seed phrase, and real support never DMs you first.
- Crypto transfers are usually irreversible, so act fast: report to the exchange/platform and your national cybercrime authority, and stop all further payments.
What not to do
- Never share your seed phrase or recovery words with anyone - no one legitimate needs them.
- Do not 'connect wallet' to unknown sites or sign transactions you don't understand.
- Do not move the conversation to a private app to invest.
If you already responded
Act quickly - the sooner you respond, the more you can limit. Find the situation that matches what you did:
If you clicked a link: Don't connect your wallet or enter your seed phrase anywhere.If you connected a wallet, move remaining funds to a new wallet you create offline.Revoke token approvals and treat the old wallet as compromised.
If you paid: Report to the exchange/platform immediately - they may freeze funds if you're fast.File a report with your national cybercrime authority with wallet/transaction IDs.Do not pay more to 'unlock' or 'recover' funds; that money is gone or fake.
If you shared a code, OTP, or login: Never share a code, password, or seed phrase with anyone.If you shared exchange login details, change them and enable app-based 2FA now.Move funds to a secured account/wallet if you suspect access was given.
If you only clicked the link but entered nothing: close the page, don't enter anything, and watch the linked accounts for unusual activity. Full steps →
If you entered card details: contact your bank now to freeze the card and dispute charges, then watch your statement. Full steps →
If you shared an OTP or one-time code: the scammer may be logging in right now - change the password, sign out other sessions, and turn on app-based 2FA. Full steps →
If you sent money: contact your bank or payment provider immediately to try to stop or recall it, and report it. Full steps →
If you installed an app / gave remote access: disconnect from the internet, uninstall it, and change key passwords from a different, trusted device. Full steps →
If you shared passport, ID, or KYC documents: watch for identity theft, consider a credit freeze or fraud alert, and keep the evidence. Full steps →
Watch out for a second scam. People who've just lost money are often contacted again by a fake "recovery" service promising to get it back for an upfront fee. Legitimate recovery never starts with a fee paid to someone who contacted you - see recovery scams.
First time dealing with this? Start with the first 24 hours after a scam checklist and how to save evidence.
How to verify safely
Check security guidance on the wallet/exchange's official site; they will never ask for your seed phrase, and real support never DMs you first.
How to report it
Report through official channels for your country. Use our scam reporting directory to find the right authority, and never use phone numbers or links from the suspicious message itself. If an official link looks outdated, tell us so we can review it.
Official sources checked
- Google - November 2025 fraud and scams advisory High reliability
Cybersecurity report
-
Law-enforcement alert
Reviewed 2026-06-05. See our methodology for how we select sources.
Related pages
- Crypto wallet scam
- Crypto investment scam
- Pig butchering scam
- What to do if you sent crypto to a scammer
- What to do if you sent money to a scammer
- How to save scam evidence
Related platforms
Report in your country
Related terms
Frequently asked questions
Is the MetaMask validation message real?
No. Don't connect or sign. Signing that request can authorise a drainer to empty your wallet.