Key facts
- MetaMask is adding new scam warning features to its mobile app and browser extension.
- New warnings will flag lookalike wallet addresses, investment and romance scams, and transfers to first-time recipients.
- Added Protection automatically reverts transactions that don't match their previews.
- Added Protection launches on the browser extension first, with mobile support to follow.
- MetaMask uses AI, including LLMs, to detect threats and disguise malicious transactions.
- Authorities have recently seized millions in crypto tied to investment and romance schemes.
MetaMask, a popular cryptocurrency wallet, is enhancing its security features with new scam warning functionalities for its mobile app and browser extension. The updates, announced on Monday, aim to protect users from various fraudulent activities.
Key among the new safeguards are warnings for lookalike wallet addresses, investment and romance scams, and transfers to recipients the user has not previously sent funds to. Additionally, a feature called Added Protection will automatically revert transactions if they do not align with their previews, according to MetaMask. This feature will initially be available on the browser extension, with mobile support to follow.
Martin Peko, Staff Product Manager at MetaMask, explained that the development was driven by observations that users sometimes ignored existing scam warnings, either due to trust in the recipient or being actively guided past them. This led to the implementation of more robust controls and a direct route to priority support for uncertain users.
MetaMask is leveraging AI, specifically large language models (LLMs) and classification models through its security partner Blockaid, to detect and counter sophisticated scams. These AI tools analyze unstructured content from websites and social feeds, as well as on-chain bytecode and transaction flows, to identify malicious behavior in real time. These findings are then used to warn users before they initiate a transaction.
Peko highlighted that these new features represent a shift from static warnings to more responsive and contextual alerts, with some already live, including address poisoning alerts and first-time send alerts. The rollout coincides with ongoing efforts by authorities to combat investment and romance fraud. In July, U.S. authorities seized over $25 million in cryptocurrency linked to such schemes, and the Secret Service recently froze $52.8 million in crypto connected to a marketplace for scammers.