Wallet injection is a form of tampering with a cryptocurrency wallet’s input or display flow. Instead of breaking the wallet cryptography itself, the attacker interferes with what the user sees or enters, such as a recovery phrase, seed phrase, destination address, amount, or approval prompt. The goal is to capture secrets or quietly change a transaction before it is signed.
This matters because wallet software is often trusted at the moment of payment or recovery. If a malicious overlay, modified app, browser script, or mobile implant can alter that moment, an attacker may steal funds, redirect transfers, or harvest credentials for later reuse. Defenses focus on verifying addresses on a separate trusted screen, avoiding recovery phrase entry into untrusted prompts, using hardware wallets where possible, and watching for suspicious UI behavior, unexpected permission requests, or wallet pages that do not match the legitimate app or site.