User cryptoaddictchie has warned on the BitcoinTalk forum about a new phishing attack targeting MetaMask crypto wallet owners. He wrote that he received an email demanding that he verify his wallet by adding an email address to it and enabling fingerprint access. The button in the email led to a phishing site where the victim was asked to link their wallet, which would inevitably have resulted in the theft of all funds.

Users in the comments quickly took the scheme apart. According to user SFR10, the fraudulent domain was registered only a couple of months ago. User FinneysTrueVision added that the attackers use a clever anti-analysis trick: if you visit their site via a VPN or from a bot's IP address, it simply redirects you to Wikipedia, but for regular users on a home internet connection it displays a fake MetaMask page.

Users also discussed how the scammers find their victims. According to user The Cryptovator and user mabji1, MetaMask is a non-custodial wallet that doesn't require linking an email at all, so any such email is a hundred percent scam. User julerz12 suggested that the email addresses may have been leaked from other Web3 projects or sold by their creators themselves, so it's better to use a "junk" email address for dubious activities. User albon advised simply ignoring such messages and always accessing official sites manually via bookmarks, since the MetaMask extension already blocks most known phishing sites anyway.