How to spot a fake Phantom extension

MetaMask fakes have their own page. This one is Phantom: ghost icon, Solana ads, ID bfnaelmomeimhlpmgjnjophhpkkoljpa.

Security Guides · 6 min · Updated Aug 2026 · Expert

A fake Phantom extension reuses the ghost icon and the word Phantom. It cannot reuse Chrome ID bfnaelmomeimhlpmgjnjophhpkkoljpa. If the ID differs, remove it before you type a seed.

This is not the MetaMask fox guide. Phantom clones ride Solana airdrop season. Hash a leftover .crx here only to identify it — then install from phantom.app.

Do this now

  1. Read the ID on the listing you already opened. Official: bfnaelmomeimhlpmgjnjophhpkkoljpa. Compare character-by-character after /detail/.
  2. Remove the fake, do not “log in” to migrate. If you entered a seed, that wallet is burned. Triage on a clean device.
  3. Install Phantom from phantom.app and hash if you have a file. Use the verifier preset phantom_chrome for a saved .crx. Prefer the store listing Phantom linked.

Fake Phantom tells

TellRealFake
Chrome IDbfnaelmomeimhlpmgjnjophhpkkoljpaAny other 32 characters
Site that linked youphantom.appairdrop dashboards, sponsored results
User countEstablished listingHundreds of users, published last week
PublisherPhantom“Phantom Network Ltd.” look-alikes
Phantom support will not DM a “re-verify wallet” extension. Seed-in-the-browser is always theft.

What spotting a fake cannot undo

Removing the extension does not rotate a seed you already typed. Assume compromise. New seed, new device, then revoke where possible.

WalletGuard cannot freeze Solana funds.

Official install: download Phantom safely. MetaMask analog: fake MetaMask.
Live artifact · preset phantom_chrome

Catalog hash loads from WalletGuard’s wallet database. Confirm the same string on the developer’s signed release before you install.

Hash this file in the browser

Nothing is uploaded. Web Crypto SHA-256 stays on this device.

·
SHA-256

Compare to the catalog hash

This page pre-selects phantom_chrome. Switch wallets if you grabbed a different build.

Preset hash: loads from catalog

No file selected yet.

Open the full verifier with this preset →

Frequently asked questions

What is the real Phantom Chrome extension ID?

bfnaelmomeimhlpmgjnjophhpkkoljpa. If chrome://extensions shows anything else named Phantom, remove it.

The fake already has my seed. Now what?

Treat the seed as public. Create a new wallet on a clean install from phantom.app, move what you can, and follow the fake-wallet recovery checklist. Do not reuse the old words.

Is WalletGuard a Phantom product?

No. Independent directory and hasher. We are not Phantom support.

Open verifier · phantom_chrome