My MetaMask was drained after approving a token on a fake Uniswap site, any way to recover my ETH?

asked 1d ago0 views42 answers
0

I'm really reeling right now. Earlier today, around 3 PM my time, I was trying to swap some obscure altcoin for ETH on what I thought was Uniswap. I typed in 'uniswap' into my browser, clicked what looked like the official link, and connected my MetaMask wallet. It asked me to 'approve' the altcoin token for swapping, which I've done a million times before, so I didn't think anything of it. The gas fee was a bit high, but again, nothing too alarming.

About 10 minutes later, I noticed my ETH balance was zero. Completely wiped out. I checked Etherscan and saw multiple transactions sending out all my ETH to an address I don't recognize. My heart just dropped. I feel so stupid. I reported it to MetaMask support, but they just sent me an automated response. Is there *any* way to get my ETH back? Or is it just gone forever?

Mentioned in this discussion
Etherscan· neutral

42 Answers

45

Ugh, this is a classic 'approving a malicious contract' scam. Happens to way too many people. The bad news first: if your ETH was sent out via *your* approved transaction (even if you were tricked into approving it), it's technically *you* who authorized the transfer to the scammer's address. Blockchain transactions are irreversible. Once it's gone from your wallet to theirs, it's gone.

However, what you *can* do, and what you *should* do, is try to trace it. Etherscan is your friend here. Look at the transaction details, follow where the ETH went. Often, these scammers will try to wash it through multiple addresses or use mixers. You can report the addresses to services like TRM Labs or Chainalysis if you want, they track this stuff for law enforcement. You can also report it to the FBI IC3. Don't expect to get your money back, but it might help others.

Noah White · Hobart, Australiaanswered 1d ago
39

That's awful, I'm so sorry that happened to you. Please don't beat yourself up too much, these scammers are incredibly sophisticated and it could happen to anyone. It's a really tough situation because, as others have said, crypto transactions are irreversible. For anyone else reading, this is why you always, always bookmark your trusted DeFi sites. Never click search results for things like Uniswap, particularly if they have 'ads' at the top. And review what you're actually approving in MetaMask, not just the gas fee. There are tools like Revoke.cash too, to check and revoke malicious approvals, but that's for preventing future drains, not reversing past ones. Stay strong.

Sophie Nel · East London, South Africaanswered 1d ago
28

Man, this sucks. I had something similar happen to me last year, not with Uniswap, but another DEX. I lost about 3 ETH. Felt like such an idiot, I was so angry at myself for not double-checking the URL. It's so easy to click a fake link when you're rushing or not paying full attention.

I reported it to my local police and the FBI IC3, but honestly, nothing came of it. They took my details, gave me a case number, and that was that. The money was gone. I spent weeks trying to trace it on Etherscan, but it went through so many addresses so fast, there was no way to keep up. It's a painful lesson, but now I triple-check every single URL and bookmark my most used sites. Never click from search results, always use your saved bookmark.

Adam Simon · Toulouse, Franceanswered 1d ago
12

Honestly, chances are very slim. If your ETH is gone to a scammer's address, it's pretty much considered unrecoverable in most cases. These guys operate internationally, and chasing down crypto across borders is incredibly difficult for law enforcement. The blockchain is transparent, sure, but anonymity is a big advantage for criminals.

Andreas Bauer · Dresden, Germanyanswered 1d ago
15

Yeah, I'm with Andreas on this one. As much as it hurts to say it, you probably won't see that ETH again. The moment you approved that contract, you basically gave them permission to drain your wallet. It's a common trick, and it works because people trust the names like Uniswap. It's a really rough lesson to learn.

Camille Robert · Lille, Franceanswered 1d ago
9

I mean, it's worth reporting to authorities like the FBI IC3, and maybe even talking to your bank if you bought the crypto with fiat and there's *any* possible link, but crypto transactions are designed to be final. That's kinda the point, right? No central authority to reverse things. Super painful, but that's the reality of DeFi and unregulated spaces.

Sophia Bergeron · Calgary, Canadaanswered 1d ago
21

Ugh, my heart goes out to you. I lost about 7k in USDT earlier this year to a similar contract approval scam, only mine was on a fake staking site. Just poof, gone. The feeling of absolute helplessness and anger is just awful. I didn't even bother reporting it to be honest, I just figured it was a lost cause and I'd just beat myself up over it.

Michael Schmidt · Munich, Germanyanswered 1d ago
33

I really hope you get some good news, but I'm not optimistic. I lost a bit more than that, low five figures, to a smart contract exploit where I signed a bad transaction. Tried everything. My bank couldn't do anything because the funds left my Kraken account, not their system directly. Kraken said they couldn't reverse blockchain transactions. I even looked into some 'crypto recovery' services, but they all wanted upfront fees, which felt like another scam waiting to happen. Please, please, *please* be wary of those 'recovery' folks who message you now; they're almost always scammers trying to prey on desperate people.

Thomas Williams · Canberra, Australiaanswered 1d ago
18

This is exactly why you need to be so paranoid. I've been super careful after seeing so many of these stories from friends. If you're ever connecting to a new site, or even an old one that *feels* off, always check the contract address you're interacting with on Etherscan before you hit 'approve'. And bookmark everything. I save all my legit DEX and dapp links in a dedicated browser folder. It's a pain, but better than losing everything. Sorry, man, it's a harsh lesson.

Aaron Tan · Singapore, Singaporeanswered 1d ago
23

I know it's probably not what you want to hear, but for the most part, once that transaction is confirmed on the blockchain and it's gone to a scammer, it's a goner. There are just so many layers of obfuscation they use. You *could* try reaching out to the FBI IC3, as others said, but honestly, their success rate with individual crypto recovery is extremely low because of the cross-border nature and the speed at which funds are moved. Focus on securing what you have left and learning from this, however painful it is.

Emily Harris · Birmingham, United Kingdomanswered 1d ago
7

Ouch, mate. That sounds like a classic malicious token approval scam. The fake Uniswap site likely presented a contract that, when 'approved' by your MetaMask, gave the scammers direct permission to drain your wallet, not just for the token you *thought* you were swapping, but for your ETH too. Recovery is, sadly, highly unlikely. Once the ETH is sent to an address they control, it's pretty much gone. Best bet is to report it, though I know you've tried MetaMask support. Try filing a report with the FBI IC3. They might not get your money back, but it adds to their data.

Henry Taylor · Leeds, United Kingdomanswered 1d ago
6

I feel your pain. Exactly the same thing happened to me a few months back. I was trying to stake some new DeFi token. Clicked a link from Discord. Same deal – connected wallet, approved a token. Bam. Gone. My wife kept saying, 'Be careful online!' and I just didn't listen. Lost about 2 grand. It’s a horrible feeling, like being violated. I spent days staring at Etherscan, hoping for a miracle. No luck. You learn a harsh lesson quickly in this space.

Felix Hoffmann · Dusseldorf, Germanyanswered 1d ago
4

Hmm, 'fake Uniswap site' sounds suspicious, but 'approve the altcoin token' is standard. Did you check the *actual* contract address you were approving? Scammers often spoof interfaces. Also, double-check your browser history to be 100% sure you didn't type a typo and land on a phishing site. It's easy to do. The automated response from MetaMask is standard; they're a wallet, not a bank. They can't reverse transactions.

Lucas Ouellet · Vancouver, Canadaanswered 1d ago
5

This hit me hard too. I lost my entire savings on a 'yield farming' opportunity that turned out to be a rug pull. Woke up one morning, and my balance was zero. I was devastated. For weeks, I just kept checking my wallet, then Etherscan, like a zombie. My girlfriend thought I was going crazy. The worst part is the shame. You feel like such an idiot. Reporting it to the FTC felt like a waste of time, but maybe it helps someone else avoid the same fate.

Thomas Bauer · Hamburg, Germanyanswered 1d ago
6

Man, sorry to hear this. It’s brutal. I got hit by a similar phishing scam last year, lost about half a Bitcoin. I was trying to claim some airdropped tokens and ended up approving a malicious contract. That feeling when you realize it’s gone… unmatched. I even reached out to some 'recovery specialists' but they just wanted more money upfront. Total scammers. Report it to the FBI IC3 if you haven't. Might not get it back, but it's the official channel.

Kevin Walker · Miami, USAanswered 1d ago
3

I'm so sorry this happened to you. I also fell for a fake site, but luckily it was only a small amount of money. I thought I was on the official chainlink website, but it was a clone. They asked me to connect my wallet to verify something, and next thing I know, a few hundred dollars are gone. It's terrifying how convincing these sites can be. I'm still shaken up about it.

Charlie Wood · Brighton, United Kingdomanswered 1d ago
5

This is exactly how they got me too. Was looking for a NFT marketplace, ended up on a fake. Connected my wallet, approved a token. By the time I realised, my ETH was heading to a wallet on Etherscan I'd never seen before. Total loss. I spent hours trying to track the funds, looking at block explorers, checking if they hit an exchange like Kraken. Nothing. It’s a hard lesson, but you have to be hyper-vigilant. Never click links from random DMs or suspicious search results.

Brandon Jones · Miami, USAanswered 1d ago
4

Welcome to the club, unfortunately. This happened to me about six months ago. I was trying to unstake some funds from a DeFi protocol and clicked what I thought was the correct link. They asked for a token approval, and well, you know the rest. All my MATIC was gone in minutes. I was furious, then I was sad, then I was just numb. I tried contacting TRM Labs for some analysis, but they’re more for institutions. It’s a very lonely feeling when your crypto vanishes.

Noah de Boer · The Hague, Netherlandsanswered 1d ago
3

Wait — did you check the URL very carefully? Like, letter by letter? Scammers are brilliant at making domain names look almost identical. Instead of uniswap.org, maybe it was uniswap-v3.com or something equally sneaky. And the 'approve' function is often abused. They don't just approve the token, they can approve unlimited spending from your wallet for *any* token. Always revoke approvals you don't need.

Emma Neumann · Cologne, Germanyanswered 1d ago
7

DO NOT trust anyone in your DMs offering to help recover your funds. Especially any 'Funds Recovery Group' or similar outfits. They are ALL scams, preying on desperate people. The scammers who stole your ETH are probably watching this thread, looking for victims to target again. Report the scam to the FTC and the FBI IC3. That's the only legitimate route, even if it feels hopeless. Stay safe out there.

Isabella Roy · Ottawa, Canadaanswered 1d ago
2

Hey, really sorry to hear about your situation. That's a terrible experience. It's incredibly easy to fall for these scams, especially when you're focused on the swap. Don't beat yourself up too much. These guys are sophisticated. The best thing you can do now is learn from it and be extra cautious going forward. Maybe set up a hardware wallet for significant amounts?

George Jones · Birmingham, United Kingdomanswered 1d ago
5

This is exactly the kind of scam that worries me. I always double, triple check the URL. It's tedious but necessary. And I try to limit my approvals. If I'm only swapping one token, I won't approve *all* tokens. You can often set limits on approvals, or at least revoke them immediately after use using a site like Revoke.cash. That’s a crucial safety step many people overlook. It’s your digital security, treat it like physical security.

Marie Becker · Stuttgart, Germanyanswered 1d ago
4

I had something similar happen. I was trying to buy a new token and approved it through a fake aggregator. Woke up the next day and my wallet was empty. Took me ages to figure out what happened. It's like a punch to the gut. I lost about €1500, which was a lot for me. No exchange or wallet company will help, they just say it's your responsibility. I reported it, but honestly, I just accepted it was gone. It’s a steep learning curve, my friend.

Sophie Visser · Amsterdam, Netherlandsanswered 1d ago
6

The most critical mistake here is the token approval itself. When you approve a token, you're essentially giving permission to a smart contract to interact with your tokens. In this case, the 'approve' action on the fake site likely granted the malicious contract permission to transfer *your* ETH to *their* address. A key takeaway: always review token approvals carefully on Etherscan *before* signing. Look at the function called and the contract address. Even better, use a hardware wallet like Ledger or Trezor to review and confirm transactions.

Paul Wagner · Hannover, Germanyanswered 1d ago
5

Oh mate, I feel this deep in my bones. I was trying to claim an airdrop from a project I thought was legit. Clicked the link, connected MetaMask, hit approve. Next thing I know, my ETH is gone. It was like £3k. I was shaking. My partner found me sobbing at my desk. I spent days trying to trace it, contacting exchanges, but it’s like chasing ghosts. They just vanish into the ether. Don’t let anyone charge you to 'recover' it – they’re scams too.

Lotte Smit · Groningen, Netherlandsanswered 1d ago
3

That's rough, man. Totally feel for you. These fake sites are getting way too good. It's a harsh lesson, but for future reference, always use a bookmark for trusted sites like Uniswap, or even better, use a DApp aggregator that vets its connections. It’s not foolproof, but it adds another layer of security. And seriously, never click on links from search results if you can help it. Go directly to the source.

Noah Pelletier · Vancouver, Canadaanswered 1d ago
4

Same here. Lost a decent chunk of ETH doing exactly what you described. Felt like a complete idiot. I even had a hardware wallet, but I guess I got complacent and clicked through the prompt too fast. It's a humbling experience. You learn to be paranoid. I now use a separate 'burner' wallet for any new DeFi interactions, and I never give it more funds than I'm willing to lose. It's the only way I sleep at night now.

Jacob Morin · Toronto, Canadaanswered 1d ago
6

I understand the devastation. I lost a significant amount in a similar scenario involving a fake NFT minting site last year. The key red flag, which I ignored in my haste, was the request for an 'approve' transaction for a token I wasn't directly interacting with for the mint itself. These scammers are sophisticated and exploit the trust users place in common actions like approvals. Always, always scrutinize the transaction details before signing, especially the function being called and the contract address. If it looks even slightly off, stop.

Fatima Al Maktoum · Sharjah, UAEanswered 1d ago
5

So sorry to hear this. It's a common trap. One thing I do now is use a site like Etherscan's Token Approval Checker to regularly review and revoke permissions for any contracts I've interacted with. If you approved something shady, you can revoke its access to your wallet there, which stops it from draining more funds if it hasn't already. It’s not a recovery tool, but it prevents further damage. Keep using that tool regularly, especially after any new interaction.

Omar Al Qasimi · Sharjah, UAEanswered 1d ago
7

My condolences. This is a hard-learned lesson for many. The trick is that the 'approve' function itself isn't malicious; it's standard for token interactions. The scammer creates a malicious token contract that, when approved, gives *them* the permission to transfer *your* assets. So, you weren't approving the token for swapping; you were approving the *scammer's contract* to take your ETH. Always verify the contract address presented in your wallet pop-up against the legitimate one before signing. If you're unsure, don't proceed. This verification step is paramount.

Andreas Becker · Hamburg, Germanyanswered 1d ago
9

Oof, that's rough. This sounds like a classic token approval exploit, not a fake Uniswap site itself. They trick you into signing a transaction that *looks* like a normal token approval but actually grants the scammer permission to drain your wallet of *other* tokens or, in your case, ETH. The key is that you *signed* something that authorized the transfer.

Unfortunately, recovering that ETH once it's been moved is next to impossible. The blockchain is immutable. Your best bet is reporting it, but honestly, don't expect the funds back. Your only real defense is going forward: revoke approvals *constantly*. Use a tool like revoke.cash to see what contracts have access to your wallet and cut ties with anything you don't actively use or don't trust 100%. Keep your wallet signing confirmations limited.

Liam Pillay · Pretoria, South Africaanswered 1d ago
7

OMG, I feel your pain. I had something similar happen last year, thought I was being careful. Lost about $800 worth of SOL. It’s like a punch to the gut, right? I spent days refreshing Etherscan, hoping like hell some magical reversal would happen. It didn't.

What I learned the hard way is that once it's gone, it's gone. I did file a report with the FBI's IC3 (ic3.gov) just to put it on record, and my bank (Chase) was useless, of course. They said crypto transactions are final. It’s a horrible feeling, but you’re not alone. Just gotta chalk it up to a brutal lesson learned and be hyper-vigilant from now on. Did you see where the funds went on Etherscan?

Ciara Walsh · Dublin, Irelandanswered 0d ago
5

This is tricky. The 'fake Uniswap site' is a common vector, but it's often more about the token approval. When you approve a token, you're giving a smart contract permission to move it. If that contract is malicious, it can drain you. Did you happen to notice the exact wording of the approval request in MetaMask? Sometimes they try to obscure what you're actually granting permission for.

Reporting to MetaMask support is usually just a formality; they can't reverse transactions. Your best bet, statistically speaking, is very low. The FTC might be interested, but again, for recovery? Doubtful. Just be extra careful with approvals going forward.

Laura Koch · Stuttgart, Germanyanswered 0d ago
6

Wait, did you type 'uniswap' into your browser search or directly into the address bar? Because honestly, the sponsored results at the top of Google/Bing can be straight-up scams sometimes. I’ve seen fake links there for everything from exchanges to NFT marketplaces.

If you clicked a sponsored ad, that's a whole other layer of scamming. Even if you *think* you typed it right, those top ads can look legit. Always bookmark your main sites like Uniswap, MetaMask, etc., and use those bookmarks. It’s a small thing, but it can save you a lot of headache. So sorry this happened to you.

Saoirse O'Connor · Dublin, Irelandanswered 0d ago
4

Oh no, that sounds absolutely devastating! I'm so sorry you're going through this. It’s incredibly easy to fall for these tricks, especially when you're just trying to make a trade. The crypto space can be so unforgiving.

While getting the ETH back is unfortunately very unlikely, please don't beat yourself up too much. These scams are designed to look legitimate and prey on people's trust. The important thing now is to learn from it and protect yourself moving forward. Have you considered using a hardware wallet for larger amounts? It adds an extra layer of security that might give you some peace of mind.

Lina Meyer · Dusseldorf, Germanyanswered 0d ago
8

The critical point here is the 'approve' function. In the Ethereum ecosystem, token approvals are powerful and potentially dangerous if misunderstood. When you approve a token to a contract, you grant it sweeping permissions. The scammer likely deployed a malicious contract disguised as a Uniswap interface. This contract then used your prior 'approve' signature to drain your wallet.

To prevent this, always use a dedicated contract interaction checker like Etherscan's Token Approvals page to review and revoke permissions regularly. Don't just approve and forget. Also, consider using a secondary, 'burner' wallet for most DeFi interactions, keeping your main ETH holdings in a more secure, offline wallet. This significantly limits the blast radius of any single compromise.

Felix Neumann · Berlin, Germanyanswered 0d ago
5

Yeah, this whole situation sounds painfully familiar. That high gas fee you mentioned? That's actually a *red flag*. Scammers often set high gas fees for the *initial* approval transaction to make it look legitimate, knowing that the *actual* drain transaction (which they control) will then be cheap or have a fee covered by the stolen funds. It’s a psychological trick.

So, if a transaction that *looks* like a normal swap or approval suddenly has an astronomical gas fee, pause. Seriously pause. Try to verify the site independently, maybe through a direct link from the project's official Discord or Twitter, before proceeding. It’s a tough lesson, but hopefully, you can recoup future losses by spotting that next time.

Leo Thomas · Nantes, Franceanswered 0d ago
4

Oh dear, that's absolutely awful news. It takes a lot of courage to share what happened, and I really admire you for it. Please be kind to yourself – these scams are getting incredibly sophisticated. It’s not a reflection on your intelligence at all.

I know it’s not helpful for getting the money back right now, but maybe think about setting up alerts for your wallet on a block explorer like Etherscan? You can get notified if there are any outgoing transactions. It might not stop the scam, but it could give you a few precious minutes to react, like revoking further approvals if possible. Sending you good vibes.

Grace White · Darwin, Australiaanswered 0d ago
5

Did you use any kind of browser extension besides MetaMask? Sometimes fake sites try to inject malicious scripts through fake ad blockers or other 'enhancement' tools. Or maybe your computer got compromised with malware? It’s worth checking your system security.

Also, double-check the URL. Was it definitely app.uniswap.org? Scammers can get *very* close, like app-uniswap.org or uniswap-app.net. They rely on people not looking closely enough. I always use a bookmark for Uniswap, honestly. It's safer than typing or using search results.

Jonas Koch · Leipzig, Germanyanswered 0d ago
7

Okay, let’s break this down technically. The 'approve' function in ERC-20 tokens (which you likely interacted with) allows a designated spender (in this case, the scam contract) to withdraw tokens from your wallet on your behalf, up to a specified limit (often 'infinite' if not carefully managed). When you connected to the fake site and 'approved' the token, you essentially handed the keys to that specific token over to the scammer. They then likely had another script ready to immediately execute a transfer *from* your wallet *to* their wallet, using the approval you just granted.

Recovery is extremely rare. Law enforcement agencies like the FBI IC3 do collect reports, but their ability to trace and recover funds from anonymized crypto wallets is limited, especially when funds are quickly moved through mixers or multiple exchanges. Focus on securing your remaining assets and learning to scrutinize all contract interactions.

Daniel Wilson · Phoenix, USAanswered 0d ago
6

Man, I feel that gut-wrenching feeling. Happened to me years ago on a fake MyEtherWallet site. Lost about 2 ETH. I was sick for like a week straight. My wife kept telling me to just forget about it, but I couldn't. I ended up reporting it to the FTC and even tried filing a police report, which was totally useless for crypto.

Looking back, the biggest thing I learned was to never trust a link from a random DM or a search result. Always go directly to the source, or use a trusted aggregator. I now keep almost all my funds in a hardware wallet (Ledger) and only bridge over tiny amounts to my MetaMask for active trading. It’s a hassle, but better than the alternative. Don't give up on learning, even if the ETH is gone.

David Schafer · Frankfurt, Germanyanswered 0d ago
8

WARNING: If anyone DMs you offering to help recover your ETH, especially if they claim to be from a 'Funds Recovery Group' or ask you to send them money upfront or connect your wallet *again* to 'trace' the funds - DO NOT DO IT. They are almost certainly scammers trying to pull a second scam on you.

Your ETH is likely gone for good. The best you can do is report it to the FBI IC3 (ic3.gov) and the FTC. This helps them track patterns, even if they can't get your money back. And please, *please* learn from this. Double, triple check URLs. Revoke approvals constantly. Don't click suspicious links. Stay safe out there.

Logan Fortin · Winnipeg, Canadaanswered 0d ago

Your answer

You'll be asked to sign in to post.