How to spot a fake MetaMask extension
Counterfeit MetaMask listings are the number-one way wallets get drained. Here are the four checks that expose them in seconds.
Security Guides · 7 min · Updated Jun 2026
A fake MetaMask looks identical to the real one until you type your Secret Recovery Phrase — then your funds are gone. The good news: counterfeits leave obvious fingerprints if you know where to look. Here are four checks.
1. The extension ID is the giveaway
Every Chrome extension has a unique ID in its store URL, right after /detail/. The official MetaMask Chrome ID is nkbihfbeogaeaoehlefnkodbefgpgknn. If the ID is anything else, it is not MetaMask — no exceptions.
2. Confirm the publisher
The listing's publisher must be “MetaMask” and carry the store's verified-publisher badge. A slightly different name (“MetaMask Wallet Pro”, “Meta Mask”) is a red flag.
3. Check the user count and reviews
The genuine extension has 10M+ users and thousands of reviews built up over years. A listing with a few hundred users and a handful of reviews is a fake riding the name.
4. Inspect the icon and wording
The fox icon should match exactly. Fakes often tweak the colors or proportions, or pad the description with typos and urgency (“official latest version 2026”).
The reliable fix: install from the official source and verify
Skip the guesswork by following our guide to downloading MetaMask safely, then verify the SHA-256 checksum of the file. Want the general method? See how to confirm any browser extension ID is official.
Frequently asked questions
What is the official MetaMask Chrome extension ID?
It is nkbihfbeogaeaoehlefnkodbefgpgknn, visible in the store URL after /detail/. If the ID differs, the extension is not MetaMask.
How many users does the real MetaMask have?
The genuine MetaMask extension has more than 10 million users and thousands of reviews. A low user count is a strong sign of a fake.
I installed a fake MetaMask — what now?
Remove it immediately and move any funds to a brand-new wallet created on a clean device with a new seed phrase. Treat the old phrase as compromised.