MetaMask adds in-wallet safeguards to block crypto scams

MetaMask, the crypto wallet developed by ConsenSys, rolled out new in-wallet safeguards in recent software updates across its browser extension and mobile apps. The changes flag risky sites and display context-sensitive warnings when decentralized apps request token approvals or ask users to sign complex transactions.

When a dApp asks to spend tokens, MetaMask now shows explicit details about the scope and permanence of the approval, highlights unusually large or unlimited allowances and warns if the destination contract or website matches known scam patterns. Transactions that include token swaps or transfers to unfamiliar addresses are flagged and users receive prompts to verify recipient addresses and amounts before confirming.

The safeguards combine automated checks against known malicious domains and contract addresses with clearer user-facing explanations inside the wallet. MetaMask connected the updates to in-wallet help content that describes common red flags and safer practices. Experienced users retain the ability to proceed when they accept the risks.

Additional elements of the rollout include improved labeling of third-party dApp requests, clearer presentation of gas fees and expected transaction outcomes, and more prominent prompts when an action would enable a contract to move tokens on a user’s behalf.

Security experts and wallet developers point to excessive token approvals and counterfeit sites as frequent causes of user losses. Wallet-level protections complement measures from project teams, marketplaces and user education aimed at reducing fraud.

Cryptocurrency wallets translate on-chain operations into approval and signing requests. Scammers commonly use fake dApps, phishing domains and malicious smart contracts to request broad token allowances or trick users into signing transactions that transfer assets. MetaMask previously added phishing detection and transaction detail screens; the latest update expands those protections to present clearer, actionable information at the point users make security-critical choices.