Free tools Windows power users keep installed
One-click scans. No signup required.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If you only connected your wallet—and did not sign anything or reveal your recovery phrase or private key—the connection alone does not authorize token transfers in MetaMask’s documented connection flow. Disconnect the site, then check your wallet activity and token approvals. If you signed a transaction or permission, or shared a secret credential, take the stronger steps below. MetaMask’s connection guidance distinguishes connecting from signing.
First, identify what happened
A wallet connection, a signed permission, and disclosure of a recovery phrase or private key are different events. The right response depends on which one occurred.
- Connected only: In MetaMask’s documented flow, a dapp can learn your public address and inspect public blockchain information, such as balances. The connection alone does not authorize token transfers. Disconnect the site and inspect your activity anyway. Wallet behavior and permission types vary, so consult the official instructions for your wallet.
- Signed a token approval or permission: A token allowance can let a contract move tokens up to the allowance’s limits. Disconnecting the site does not remove an on-chain approval; check and revoke suspicious approvals separately.
- Signed a transaction or another request: Review the exact request and its result. Without the wallet, network, and signed data, it is not possible to tell exactly what a particular signature authorized.
- Entered or shared your recovery phrase or private key: Treat accounts derived from that secret as compromised. A new device does not make the exposed secret safe.
- See a confirmed unauthorized transfer: Prioritize securing remaining assets, preserving evidence, and reporting the incident.
What to do now
- Stop interacting with the site. Close it. Do not revisit it to verify a reward or seek help, and do not enter your recovery phrase or private key. Ethereum.org says never to enter a seed phrase on a website; legitimate apps do not need it.
- Disconnect the site in your wallet. Open the wallet’s connected-sites, permissions, or dapp settings and remove the site. The exact label and path depend on the wallet. Disconnecting ends the connection but does not revoke an on-chain token approval.
- Review wallet activity and the relevant network’s block explorer. Look for unfamiliar transactions, contract interactions, approvals, or signature requests. When investigating an unfamiliar MetaMask transaction, check its date and time, recipient, dapp, and value. Do not assume that an unfamiliar signature was harmless just because no transfer is immediately visible.
- Check approvals for each affected network. Use the wallet’s approval checker or a trusted revocation tool, and revoke suspicious allowances. Revocation is a separate on-chain transaction, may require a network fee, and does not undo transfers that have already completed.
- If you exposed a phrase or key, prepare a fresh wallet. On a clean device or browser profile, create a new wallet with a new recovery phrase. Do not reuse a Google or Apple account that may also be compromised. If it is safe to do so, move recoverable assets to the new wallet, then stop using the old wallet and phrase. If a sweeper may be monitoring the old wallet, MetaMask cautions against sending more gas to it.
- If funds are missing, preserve records and report. Save the site URL and where you found it, timestamps, wallet addresses, transaction hashes, screenshots of the claim and wallet prompts, and messages. If tracing suggests funds reached an exchange, contact that exchange promptly through its official support channel.
- Ignore unsolicited recovery offers. Do not pay an upfront recovery fee or share secret credentials with anyone offering to help. A confirmed Ethereum transaction cannot be reversed by a central authority, and recovery promises may be a second scam.
How to report the site or loss
Ethereum.org’s scam help and reporting guidance lists Chainabuse and Etherscan for reporting addresses; PhishTank and Google Safe Browsing for phishing sites; and the social platform where you encountered the link. It also points to local law enforcement, including FBI IC3 in the United States, Action Fraud in the United Kingdom, and Europol in the European Union. Reports can help warn others or support investigations, but they do not guarantee that funds will be recovered.
DriversOutdated Drivers Are Slowing You DownPerformancePC Slower Than It Used to Be?DriversCrashes, No Sound, or Screen Glitches?
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
What a connection or disconnection does not tell you
A connection by itself is not the same as signing a transaction or approval. Likewise, disconnecting a site is not the same as revoking an on-chain allowance. Check the wallet’s activity and the relevant network rather than relying on the site’s appearance or the fact that it is no longer listed as connected. For a wallet-specific assessment, you need the wallet app, networks used, and records of signatures and approvals; never post a recovery phrase or private key while asking for help.
Quick Recap
Bestseller No. 3
Bestseller No. 4
Bestseller No. 5
Best Value
Ledger Nano S Plus - Classic Crypto Wallet
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Rank #4
Trezor Safe 5 Crypto Hardware Wallet with Color Touchscreen
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Rank #3
Trezor Safe 3 Crypto Hardware Wallet with Secure Element
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Rank #2
TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
#1 Best Overall
Sale
Ledger Nano X - Classic Crypto Wallet with Bluetooth
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.
