MetaMask Adds New Wallet Protections Against Crypto Scams

MetaMask, the self-custody wallet behind much of the NFT and EVM trading economy, is rolling out new wallet protections against crypto scams, layering fresh scam warnings and an automatic transaction check on top of the address-poisoning defenses it shipped earlier this year.

What Is New in MetaMask’s Wallet Protections?

For a wallet that sits at the center of NFT minting, marketplace approvals, and EVM token swaps, scam surface area is a core infrastructure problem, not a side feature. MetaMask Staff Product Manager Martin Peko told Decrypt on September 14, 2026 that the wallet is rolling out warnings covering investment and romance scams, lookalike addresses, and first-time recipients, alongside clearer transaction screens. For related coverage, see Solana, XRP, Ethereum ETFs in Red as Bitcoin ETF Adds $100 Million.

The centerpiece is a feature MetaMask calls Added Protection, which according to that reporting automatically reverts transactions that do not match their previews. It launches on the browser extension first, with mobile support described as coming later. For related coverage, see The Crypto ETF Battle: How Ripple (XRP) Won September's First Fight.

Which Protections Have Been Added?

It is worth separating the newly reported warnings from what MetaMask already confirmed months ago. The company published its Address Poisoning Detection announcement on June 17, 2026, well before the September report, and that feature compares a pasted recipient address against addresses the user previously interacted with, warning when the beginning and ending match but the middle differs. For related coverage, see Crypto Industry ETF Rule Proposals to SEC Reveal Split on New Regulation.

That same official announcement adds a first-time-send warning for addresses a user has never interacted with, and says MetaMask now displays more of an address’s characters so lookalike swaps are easier to catch. The Added Protection preview-reversion behavior, by contrast, is attributed to Decrypt’s reporting rather than a current official release.

Availability and Setup

On the confirmed side, MetaMask states that Address Poisoning Detection is live on both Mobile and Extension across all EVM networks, with additional network support described as forthcoming in the June announcement. That breadth matters for anyone bridging or minting NFTs across chains like Polygon, Base, or Arbitrum from a single wallet.

The September Added Protection rollout is narrower and less settled. Decrypt reports extension-first availability with mobile to follow, and no release version, precise mobile date, or complete network matrix has been published. MetaMask’s own news index did not surface a matching September announcement at the time of the report, so treat rollout timing as unconfirmed.

What the Update Means for MetaMask Users

For active traders approving contracts and signing transfers all day, the practical shift is a wallet that increasingly reasons about intent, not just syntax. MetaMask’s security partner Blockaid uses large language models and classification models to analyze websites and social feeds, alongside static and dynamic analysis of onchain bytecode and transaction flows, Peko told Decrypt.

Scam Risks the Protections Address

Each capability maps to a documented scope rather than a blanket promise. Address Poisoning Detection targets the specific attack where a scammer seeds your history with a lookalike address, per the MetaMask security announcement, while the September warnings extend coverage toward investment scams, romance scams, and first-time recipients according to Decrypt.

This positions MetaMask alongside its broader push into guarded, permissioned wallet flows, echoing its agent wallet with spend limits and guard mode and the consumer-facing MetaMask Money account. The through-line is friction placed deliberately at the moment of highest risk.

What Users Will See and Need to Do

Crucially, the address warnings are prompts, not blocks: the June announcement states that users retain the decision over their transactions after a warning appears. Peko framed the design tension around users who click past alerts, telling Decrypt:

“This told us something specific: they either trusted the recipient far more than usual, or they were being actively coached past it,” said Martin Peko, Staff Product Manager at MetaMask.

Added Protection is the exception that goes further than a warning, reverting a transaction that fails to match its preview. That is a stronger intervention than the address alerts, though it remains single-sourced and extension-only for now.

Security Limits and Practical Wallet Precautions

No claim here should be read as guaranteed safety. A current official document confirming the September Added Protection rollout, its scam-warning coverage, and its network scope was not located, so feature behavior and timing rest on Decrypt’s reporting rather than independent verification.

What Users Still Need to Check

The confirmed protections still leave decisions with the user: an address warning can be dismissed, and there is no documented recovery of funds once a transfer is signed and settled. Nothing in the evidence indicates Added Protection universally covers every network or reverses losses, and Decrypt itself frames the feature as extension-first.

The backdrop is a broadly cautious-but-greedy market, with the Crypto Fear & Greed Index reading 57, or “Greed,” and Ethereum, the base layer for MetaMask’s EVM coverage, changing hands near $2,503 on the day of the report. Neither figure measures scam-detection effectiveness, and no loss-prevention or detection-rate metrics were published.

Looking ahead, the concrete milestone to watch is the promised mobile expansion of Added Protection, which MetaMask has said will follow the extension launch. For creators and collectors who sign approvals across marketplaces daily, that mobile parity, and a formal release note confirming the September features, will determine how much of this protection actually reaches the wallets doing the most onchain work.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.