TL;DR
- MetaMask added alerts for lookalike addresses, investment scams, and transfers to new recipients, available on both mobile and its browser extension.
- A feature called Added Protection automatically reverts transactions that don’t match their preview; it is available first on the browser extension.
- In July, U.S. authorities seized more than $25 million in cryptocurrencies linked to investment fraud schemes and romance scams.
MetaMask announced a series of new protections for its wallet, including improved warnings for lookalike addresses, investment and romance scams, and transfers to recipients the user has never contacted before. The updates apply to both the mobile app and the browser extension.
MetaMask Strengthens Its Real-Time Defenses Against Scams
An additional feature called Added Protection automatically reverts transactions that don’t match their preview before being executed. According to the company, this feature will launch first on the browser extension, with mobile support planned for a later date.
Martin Peko, Staff Product Manager at MetaMask, explained that the team observed that many users were ignoring existing scam warnings, suggesting they either trusted the recipient or were being actively instructed to proceed. “That made us think that a different kind of control was necessary,” Peko said, also noting that a priority support access point was added within the warning flow, so users with doubts can reach a real person instead of simply receiving a stop order.
The Role of AI in Threat Detection
Additionally, MetaMask will integrate artificial intelligence to identify threats with greater precision, in response to the growing use of this technology by bad actors to scale personalized scams and disguise malicious transactions. Its security partner Blockaid uses large language models and classification models to analyze content on websites and social media, alongside static and dynamic on-chain bytecode analysis and transaction flows.
Peko described this approach as part of “a broader shift from static warnings toward responsive and contextual warnings,” with several features already active, such as alerts for address poisoning and first-send alerts.
The launch of these features comes in response to the rise in regulatory and judicial activity. In July, U.S. authorities seized more than $25 million in cryptocurrencies linked to investment fraud schemes and romance scams that allegedly affected thousands of victims in the U.S. and Canada. In early September, the Secret Service froze $52.8 million in cryptocurrencies tied to Xinbi Guarantee, a Telegram marketplace that provided services to scammers.



