Wave of fake MetaMask support bots targets NFT Discord servers
A coordinated campaign is using compromised and cloned Discord accounts to target NFT holders with fake 'wallet sync' pages. 33 victims have reported losses totaling $215,000 in the last two weeks.
Since mid-March we've logged 33 reports from NFT holders who fell for fake 'MetaMask Support' DMs on Discord — a $215,000 total loss in two weeks. The attackers monitor popular NFT project Discords, then DM anyone who posts a troubleshooting question with offers to help from a lookalike username like 'MetaMask_Support#0001.'
The help always ends the same way: a link to a 'wallet sync' or 'token verification' page that asks for the victim's seed phrase. Anyone who enters it loses everything in the wallet within minutes.
Key red flag: MetaMask itself has no official support DMs. Any Discord user claiming to be 'MetaMask Support' is a scammer, full stop. Same rule applies to Phantom, Coinbase Wallet, Trust Wallet, and every other major wallet — none of them have DM-based support and none will ever ask for your seed phrase.
We've also seen the same pattern played out on Twitter/X replies and Reddit DMs. The seed-phrase-ask is the universal tell: no legitimate service ever needs it.
Our wallet-drainer database now tracks 47 confirmed drainer addresses tied to this campaign. If you've been targeted, revoke any outstanding wallet approvals at revoke.cash and report the Discord username so we can flag it.