Beware of Metamask phishing emails

[Ultegra134]

I received this email today, which is of course a phishing email, but it looked a little more believable compared to others I've received the past few months, it even has a "verified" tick next to their email. Never "manually" secure your account by connecting your wallet to an unknown service or platform, or even worse, input your private key because automatic validation "failed".

Unfortunately, there's still a reasonable amount of people who are unaware and fall victims to these scams.

[Orpichukwu]

The first method to detect a scam email without even trying to locate the error that might come with the email is that creating a Metamask wallet doesn't require users to input their email address before the wallet creation can be done; you just generate your wallet phrase or private key, and that's it.
 
So how can Metamask get your email address without you giving it to them? I personally discard any email that claims to come from all these wallet providers, and I know I have not given them my email address before. Receiving email from them alone is a scam.

[JeromeTash]

That blue checkmark is rather psychological to some users. It makes them believe as though the email is authentic, and yet it is not. I believe your email address must have leaked in one of those crypto related websites you signed for. So the scammer have an idea that you are into crypto.
It could have been something similar to the CoinMarketCap hack sometime back or the recent Coingecko hack.

[_act_]

It could have been something similar to the CoinMarketCap hack sometime back or the recent Coingecko hack.

You mean the email of users leaked on Coinmarketcap or Coingecko? It could also be the user itself submitted his email somewhere online. Even those that submit their email for Trezor newsletter got their email breached by hackers. But is there a way that someone will provide his email somewhere on Metamask? This phishing attacker is common to Metamask users. I guess the bad actor knows definitely that the user are using Metamask.

[Lucius]

I've never used this wallet because I simply didn't need it, and the fact that it only had a browser version in the past (if I'm not mistaken) was completely repulsive to me considering that it's just too big a risk. I understand that a lot of people need to use this kind of wallet considering what they do, but I see countless risks in all of this, not only because scammers target potential victims through phishing, but also how often we can read that someone has linked their wallet in this way he was left without everything.


@Ultegra134, maybe you didn't notice (or it doesn't matter too much to you), but the screenshot you posted reveals your e-mail address.