You can never be too careful with these emails.
Here are a few things I'd check if you ever get a crypto-related email:
→ Open the sender details and look at the full email address. Names, logos, and even blue checkmarks can be faked.
→ If you never opened a support ticket, there's no reason for
@MetaMask Support to email you.
→ Don't click links asking you to verify, connect, or validate your wallet. Open MetaMask yourself through the extension or official site.
→ If the email says your wallet will be suspended or funds are at risk, slow down. That urgency is designed to stop you from thinking clearly.
→ Never enter your Secret Recovery Phrase or password on a page you reached through an email.
If you already shared your recovery phrase, changing your password won't fix it.
Move anything left in the wallet to a new one immediately.
Stay safu.