A fake MetaMask looks identical to the real one until you type your Secret Recovery Phrase — then your funds are gone. The good news: counterfeits leave obvious fingerprints if you know where to look. Here are four checks.

1. The extension ID is the giveaway

Every Chrome extension has a unique ID in its store URL, right after /detail/. The official MetaMask Chrome ID is nkbihfbeogaeaoehlefnkodbefgpgknn. If the ID is anything else, it is not MetaMask — no exceptions.

2. Confirm the publisher

The listing's publisher must be “MetaMask” and carry the store's verified-publisher badge. A slightly different name (“MetaMask Wallet Pro”, “Meta Mask”) is a red flag.

3. Check the user count and reviews

The genuine extension has 10M+ users and thousands of reviews built up over years. A listing with a few hundred users and a handful of reviews is a fake riding the name.

4. Inspect the icon and wording

The fox icon should match exactly. Fakes often tweak the colors or proportions, or pad the description with typos and urgency (“official latest version 2026”).

If you already installed a fake: remove it, then move your funds to a new wallet with a fresh seed phrase on a clean device — see what to do if you downloaded a fake wallet. Assume the old seed phrase is compromised.

The reliable fix: install from the official source and verify

Skip the guesswork by following our guide to downloading MetaMask safely, then verify the SHA-256 checksum of the file. Want the general method? See how to confirm any browser extension ID is official.

Frequently asked questions

What is the official MetaMask Chrome extension ID?

It is nkbihfbeogaeaoehlefnkodbefgpgknn, visible in the store URL after /detail/. If the ID differs, the extension is not MetaMask.

How many users does the real MetaMask have?

The genuine MetaMask extension has more than 10 million users and thousands of reviews. A low user count is a strong sign of a fake.

I installed a fake MetaMask — what now?

Remove it immediately and move any funds to a brand-new wallet created on a clean device with a new seed phrase. Treat the old phrase as compromised.