All Recovery Playbooks

Connected to a suspicious dApp

You connected your wallet to a website or application that may be malicious.

High RiskAct NOW

Time-sensitive — act within the next 10 minutes

Follow the steps below in order. Stay calm and be thorough.

Recovery steps

1

Disconnect your wallet immediately

Open your wallet settings and disconnect from the suspicious site. In MetaMask: Settings > Connected Sites > Disconnect.

2

Revoke token approvals

The biggest risk is unlimited token approvals. Check and revoke approvals on Revoke.cash or Etherscan's token approval checker.

3

Check for unexpected transactions

Review your recent transaction history for any unauthorized transfers or approvals.

4

Consider moving to a new wallet

If you granted broad permissions or are unsure what you approved, moving funds to a new wallet is the safest option.

5

Never revisit the suspicious site

Do not return to the site, even to 'check' — interaction could trigger additional malicious actions.

Quick checklist (printable)

This tool provides educational information only. It is not financial, tax, or legal advice. Always consult qualified professionals for decisions about your specific situation. Results are based on general patterns and may not reflect your circumstances.