MetaMask is rolling out a new batch of anti-scam protections in its mobile app and browser extension, expanding the wallet’s defenses against common crypto fraud patterns.
Announced Monday, the update adds warnings for lookalike wallet addresses, investment scams, romance scams, and transfers to first-time recipients. MetaMask also said it has redesigned transaction screens on mobile and in the browser extension to make them easier to read.
Added Protection will revert mismatched transactions
MetaMask said a separate feature called Added Protection will automatically revert transactions when the final transaction does not match the preview shown to the user. The feature is launching first on the browser extension, with mobile support set to follow.
Martin Peko, Staff Product Manager at MetaMask, said the team had seen users ignore scam warnings, a sign that they either trusted the recipient or were being instructed to move ahead anyway.
“This told us something specific: they either trusted the recipient far more than usual, or they were being actively coached past it,” Peko told Decrypt. “That’s what made us think a different kind of control was needed. We’re also adding a route to priority support from this flow, so someone who’s uncertain can reach a person rather than simply being told to stop.”
Warnings now target several common scam patterns
The new safeguards are designed to flag potential investment and romance scams, lookalike wallet addresses, and transfers sent to new recipients.
Peko also said MetaMask is using AI to identify threats as attackers use the same technology to scale personalized scams and disguise malicious transactions.
“Our security partner Blockaid uses LLMs and classification models, within custom agent harnesses, to analyze unstructured content across websites and social feeds at scale, alongside static and dynamic analysis of onchain bytecode and transaction flows to identify phishing, scam, and malicious behavior in real time,” he said.
According to Peko, MetaMask uses those findings to warn users about possible scams before they send funds.
“This is part of a broader shift from static warnings to responsive, contextual ones, and much of it is already live—address poisoning alerts, first-time send alerts, and more in-depth security data on tokens and transactions, so users can make informed decisions confidently,” Peko said.
Launch comes as authorities pursue scam-support services
The rollout arrives while authorities are pursuing services linked to investment and romance fraud.
In July, U.S. authorities seized more than $25 million in crypto tied to investment and romance schemes that prosecutors said defrauded thousands of victims across the U.S. and Canada. Earlier this month, the Secret Service froze $52.8 million in cryptocurrency linked to Xinbi Guarantee, a Telegram marketplace that supplied services to scammers.
MetaMask is also preparing for a broader business split
The release also comes as MetaMask prepares for Consensys’ planned separation of its consumer and institutional businesses by the end of 2026.
Decrypt disclosed that Consensys is one of several investors in Dastan, Decrypt’s parent company.