MetaMask phishing email from system@phrase.com: “Please set up your new sign option and link your email”
I received a suspicious email impersonating MetaMask with the subject: Please set up your new sign option and link your email The visible sender was: TheMetamaskTeamTMS Phrase <system@phrase.com> This email is particularly worth documenting because Gmail reported that its authentication checks passed: SPF: PASS DKIM: PASS for phrase.com DMARC: PASS However, passing SPF, DKIM and DMARC does not mean that MetaMask sent or authorized the message. What the email says The message asks the recipient to set up a “new sign option” and link an email address. It says the action applies to all users and creates urgency by stating that the link will expire after 24 hours. The main button says: Set Up New Sign Option & Link Email The email also states: This link will expire after 24 hours. I have intentionally not reproduced the destination URL in this article. Why this email should not be trusted as a MetaMask message MetaMask's own Help Center ...