MetaMask Warns of Fake 2FA Scam Using Phishing Sites to Capture Seed Phrases on 05 Jan 2026

On 05 Jan 2026, MetaMask users were warned about a new phishing campaign that mimics two-factor authentication checks to steal seed phrases. Attackers use typosquatted domains and countdown-style warnings to pressure victims into entering full wallet recovery phrases. Once obtained, the scammers import the wallets and rapidly drain user funds.