I've been hacked/scammed (unauthorized transactions on my account)

Follow these steps as soon as possible:

  1. Remove and reinstall MetaMask from your browser (or install on a different browser). On your smartphone, delete the app and redownload.
  2. Create a new MetaMask wallet.
  3. Write down the Secret Recovery Phrase and store it someplace safe. Never give it to anyone.
  4. Go back to the compromised account and send any remaining funds to the newly created account.
  5. Discontinue using the old account as soon as possible.
  6. Report the scam.

Unfortunately, transactions cannot be reversed, nor missing the funds restored. MetaMask is a non-custodial wallet, which means we cannot control access to user accounts, nor intervene and rescue your account or funds for you.

Why did this happen? 

If you were hacked, this could be because:

  • Your computer has been compromised with malicious software and you stored your private information on your computer, allowing it to identify and retrieve your Secret Recovery Phrase, for example. 
  • You have visited a malicious phishing website that stole your information.
  • You gave your private key or Secret Recovery Phrase to someone or a site.
  • You gave a dapp or site's smart contract unlimited access to your funds (find out how to revoke access here).
  • You installed a fake MetaMask extension that stole your funds.

Try to analyze your browser history and scan your computer to eliminate any further breach of information. If you discover any suspicious phishing websites please follow the steps in our How to report a scam article so we can prevent this from happening to other users in the future. If you have any further information after your own investigation please let us know.

Was this article helpful?
142 out of 631 found this helpful

Articles in this section

See more
MetaMask Support on Twitter
Beware of scam Twitter accounts. Never give anyone your Secret Recovery Phrase!
MetaMask YouTube
Fow how-to and support videos please visit our channel