Report vulnerabilities
Email [email protected] with reproducible steps, impact, affected version, and logs or screenshots that do not expose user secrets.
Security
Security and vulnerability disclosure for Meta Wallet.
Security reports help protect users, publisher systems, and app distribution channels. The canonical security contact file is published at /.well-known/security.txt.
User compromise
Email [email protected] if you believe your account or device was compromised. Do not email seed phrases or private keys.
Phishing and abuse
Forward suspicious domains, emails, or impersonation attempts to [email protected].
Fraud warnings
Review public fraud and impersonation warnings at Fraud warnings.
Security posture disclosures
- Meta Wallet should use platform security controls including iOS keychain, biometrics when enabled, TLS, certificate validation, and least-privilege app permissions.
- Private keys, seed phrases, passwords, and one-time codes must not be requested by support.
- Regulated, custodial, or transaction-signing features require separate review evidence and operational controls before public claims are made.
Security references
Security and identity references are maintained across the legal, registry, and support pages.