Sophisticated Phishing Attack Targets MetaMask Users Through Fake 2FA Security Alerts

A new phishing scam targeting MetaMask users is spreading, using a highly realistic “two-factor authentication (2FA)” flow to steal wallet recovery phrases. The campaign highlights a growing level of sophistication in social engineering tactics, even as reported losses from cryptocurrency phishing attacks dropped sharply in 2025. Anatomy of the MetaMask Phishing Scheme Blockchain security firm SlowMist’s CSO highlighted the scam in a recent post on X (formerly Twitter). This phishing operation uses multiple layers of deception to compromise user wallets source: https://beincrypto.com/metamask-phishing-2fa-scam/