Scam patterns

Fake browser extensions

A malicious extension appears beside a legitimate wallet in store or search results.

Reference note · Sources below

Research articles and reference entries are published in English. Navigation is available in seven languages.

In this article

Overview

A malicious extension appears beside a legitimate wallet in store or search results.

Fake browser extensions. A malicious extension appears beside a legitimate wallet in store or search results.

It can read pages, replace addresses, inject approvals or collect recovery words.

Compare extension ID and publisher; preserve the manifest, version, permissions and installation URL.