Security

Arbitrum

Read

Nothing

Rule

<p><strong>MetaMask, the self-custody wallet behind much of the NFT and EVM trading economy, is rolling out new wallet protections against crypto scams, layering fresh scam warnings and an automatic transaction check on top of the address-poisoning defenses it shipped earlier this year.</strong></p>
<div style="background:#0d0d17;border-left:3px solid #e040fb;padding:16px 20px;margin:20px 0;border-radius:4px">
 <p style="margin:0 0 8px;color:#e040fb;font-weight:600;font-size:14px">TLDR KEYPOINTS</p>
 <ul style="margin:0;color:#e6edf3">
  <li><strong>The reported update:</strong> MetaMask is adding warnings for investment, romance, and lookalike-address scams, plus an "Added Protection" feature that reverts transactions not matching their previews, per Decrypt reporting.</li>
  <li><strong>Verified user impact:</strong> Address Poisoning Detection is already live on Mobile and Extension across all EVM networks, comparing pasted addresses and preserving user choice.</li>
  <li><strong>Remaining security limits:</strong> The September rollout is single-sourced; Added Protection launches on extension first, with mobile "to follow," and no full network matrix was confirmed.</li>
 </ul>
</div>
<h2 id="what-is-new-in-metamask-s-wallet-protections">What Is New in MetaMask's Wallet Protections?</h2>
<p>For a wallet that sits at the center of NFT minting, marketplace approvals, and EVM token swaps, scam surface area is a core infrastructure problem, not a side feature. MetaMask Staff Product Manager Martin Peko told <a href="https://decrypt.co/378117/metamask-adds-wallet-protections" rel="noopener noreferrer nofollow">Decrypt on September 14, 2026</a> that the wallet is rolling out warnings covering investment and romance scams, lookalike addresses, and first-time recipients, alongside clearer transaction screens. For related coverage, see <a href="https://www.nftenex.com/solana-xrp-ethereum-etfs-in-red-as-bitcoin-etf-adds-100-million/" rel="noopener noreferrer nofollow">Solana, XRP, Ethereum ETFs in Red as Bitcoin ETF Adds $100 Million</a>.</p>
<p>The centerpiece is a feature MetaMask calls Added Protection, which according to that reporting automatically reverts transactions that do not match their previews. It launches on the browser extension first, with mobile support described as coming later. For related coverage, see <a href="https://www.nftenex.com/crypto-etf-battle-ripple-xrp-won-september-first-fight/" rel="noopener noreferrer nofollow">The Crypto ETF Battle: How Ripple (XRP) Won September's First Fight</a>.</p>
<h3 id="which-protections-have-been-added">Which Protections Have Been Added?</h3>
<p>It is worth separating the newly reported warnings from what MetaMask already confirmed months ago. The company published its Address Poisoning Detection announcement on <a href="https://metamask.io/news/address-poisoning-detection" rel="noopener noreferrer nofollow">June 17, 2026</a>, well before the September report, and that feature compares a pasted recipient address against addresses the user previously interacted with, warning when the beginning and ending match but the middle differs. For related coverage, see <a href="https://www.nftenex.com/crypto-industry-sec-etf-rule-proposals/" rel="noopener noreferrer nofollow">Crypto Industry ETF Rule Proposals to SEC Reveal Split on New Regulation</a>.</p>
<p>That same official announcement adds a first-time-send warning for addresses a user has never interacted with, and says MetaMask now displays more of an address's characters so lookalike swaps are easier to catch. The Added Protection preview-reversion behavior, by contrast, is attributed to Decrypt's reporting rather than a current official release.</p>
<h3 id="availability-and-setup">Availability and Setup</h3>
<p>On the confirmed side, MetaMask states that Address Poisoning Detection is live on both Mobile and Extension across all EVM networks, with additional network support described as forthcoming in the June announcement. That breadth matters for anyone bridging or minting NFTs across chains like Polygon, Base, or Arbitrum from a single wallet.</p>
<p>The September Added Protection rollout is narrower and less settled. Decrypt reports extension-first availability with mobile to follow, and no release version, precise mobile date, or complete network matrix has been published. MetaMask's own news index did not surface a matching September announcement at the time of the report, so treat rollout timing as unconfirmed.</p>
<h2 id="what-the-update-means-for-metamask-users">What the Update Means for MetaMask Users</h2>
<p>For active traders approving contracts and signing transfers all day, the practical shift is a wallet that increasingly reasons about intent, not just syntax. MetaMask's security partner Blockaid uses large language models and classification models to analyze websites and social feeds, alongside static and dynamic analysis of onchain bytecode and transaction flows, Peko told Decrypt.</p>
<h3 id="scam-risks-the-protections-address">Scam Risks the Protections Address</h3>
<p>Each capability maps to a documented scope rather than a blanket promise. Address Poisoning Detection targets the specific attack where a scammer seeds your history with a lookalike address, per the <a href="https://metamask.io/security" rel="noopener noreferrer nofollow">MetaMask security</a> announcement, while the September warnings extend coverage toward investment scams, romance scams, and first-time recipients according to Decrypt.</p>
<p>This positions MetaMask alongside its broader push into guarded, permissioned wallet flows, echoing its <a href="https://www.nftenex.com/metamask-launches-agent-wallet-spend-limits-protocol-allowlists-guard-mode-beast-mode/" rel="noopener noreferrer nofollow">agent wallet with spend limits and guard mode</a> and the consumer-facing <a href="https://www.nftenex.com/metamask-money-account-stablecoin-yield-wallet-spending/" rel="noopener noreferrer nofollow">MetaMask Money account</a>. The through-line is friction placed deliberately at the moment of highest risk.</p>
<h3 id="what-users-will-see-and-need-to-do">What Users Will See and Need to Do</h3>
<p>Crucially, the address warnings are prompts, not blocks: the June announcement states that users retain the decision over their transactions after a warning appears. Peko framed the design tension around users who click past alerts, telling Decrypt:</p>
<blockquote style="border-left:3px solid #e040fb;padding:8px 16px;margin:16px 0;color:#e6edf3;background:#0d0d17;margin:20px 0;padding:16px 18px;border-left:4px solid #e040fb;background:#1a0d17;color:#f3f4f6;border-radius:10px;margin:20px 0;padding:16px 18px;border-left:4px solid #e040fb;background:#1a0d17;color:#f3f4f6;border-radius:10px">
 "This told us something specific: they either trusted the recipient far more than usual, or they were being actively coached past it," said Martin Peko, Staff Product Manager at MetaMask.
</blockquote>
<p>Added Protection is the exception that goes further than a warning, reverting a transaction that fails to match its preview. That is a stronger intervention than the address alerts, though it remains single-sourced and extension-only for now.</p>
<h2 id="security-limits-and-practical-wallet-precautions">Security Limits and Practical Wallet Precautions</h2>
<p>No claim here should be read as guaranteed safety. A current official document confirming the September Added Protection rollout, its scam-warning coverage, and its network scope was not located, so feature behavior and timing rest on Decrypt's reporting rather than independent verification.</p>
<h3 id="what-users-still-need-to-check">What Users Still Need to Check</h3>
<p>The confirmed protections still leave decisions with the user: an address warning can be dismissed, and there is no documented recovery of funds once a transfer is signed and settled. Nothing in the evidence indicates Added Protection universally covers every network or reverses losses, and Decrypt itself frames the feature as extension-first.</p>
<p>The backdrop is a broadly cautious-but-greedy market, with the <a href="https://alternative.me/crypto/fear-and-greed-index/" rel="noopener noreferrer nofollow">Crypto Fear &amp; Greed Index</a> reading 57, or "Greed," and Ethereum, the base layer for MetaMask's EVM coverage, changing hands near $2,503 on the day of the report. Neither figure measures scam-detection effectiveness, and no loss-prevention or detection-rate metrics were published.</p>
<p>Looking ahead, the concrete milestone to watch is the promised mobile expansion of Added Protection, which MetaMask has said will follow the extension launch. For creators and collectors who sign approvals across marketplaces daily, that mobile parity, and a formal release note confirming the September features, will determine how much of this protection actually reaches the wallets doing the most onchain work.</p>
<p style="font-size:13px;color:#888;border-top:1px solid #333;padding-top:12px;margin-top:30px">Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p><a href="https://www.nftenex.com/?p=10884" rel="noopener noreferrer nofollow">Read original article on nftenex.com</a>

MetaMask Adds New Wallet Protections Against Crypto Scams

Table of Contents

NFTENEX

Other articles published on Sep 14, 2026

Join our free newsletter for daily crypto updates!