A swap website asking for your recovery phrase or private key is asking for control of the wallet, not permission for one trade. Stop the interaction and do not enter the secret.
Why legitimate swaps do not need it
The wallet signs requests locally or through its signer. An application can request a connection and propose transactions without learning the secret that creates signatures. MetaMask’s dapp-connection guidance explicitly warns against sharing the recovery phrase.
Do not confuse a genuine wallet’s own recovery process with a website form claiming to “connect,” “repair,” “activate” or “synchronize” your account. A copied wallet logo and password-style input field do not establish that the form belongs to your wallet software.
If you already entered it
Treat the signing secret as compromised. Changing the browser wallet password does not change the blockchain private keys derived from that phrase. An attacker with the secret can use a different wallet application.
Use a clean environment and authentic wallet tools to assess a new wallet with a newly generated secret and protect remaining assets. If gas deposits immediately disappear, stop repeatedly funding the compromised account and seek reputable specialist assistance.
Ethereum’s security guidance explains the importance of protecting recovery material. Do not send the phrase to an alleged support agent so they can check whether it leaked.
Preserve the malicious domain and transaction evidence for reporting, but do not revisit it to complete a supposed recovery process.
Sources & verification (3)
Source-check date is recorded in the article details. URLs are provided for manual verification. Use Copy to keep this page open.
- How to connect to a dapp
Account and network permissions are part of the dapp connection.
https://support.metamask.io/more-web3/dapps/connecting-to-a-dapp - Ethereum security and scam prevention
Secret protection, phishing, address checks and public-key custody hygiene.
https://ethereum.org/security/ - What to do if you have a sweeper bot on your wallet
Compromised keys, automated balance draining and risk of further gas funding.
https://support.metamask.io/stay-safe/protect-yourself/fighting-back-against-sweeper-bots/