Rabby Wallet's "Phishing site detected" warning appears as a full-screen red danger alert that completely blocks access to your dApp. Users cannot proceed without explicitly accepting the risk, which very few are willing to do.
As a security-focused wallet popular among DeFi power users, Rabby takes an aggressive stance on protection. They aggregate data from multiple security providers and maintain their own curated blocklist of dangerous sites.
Rabby aggregates warnings from Scam Sniffer, GoPlus Security, and other providers - one flag affects all
Rabby simulates transactions before execution - complex interactions that fail simulation get flagged
Unusual token approval requests or unlimited approvals trigger automatic warnings
Domains registered within the last 30 days face extra scrutiny
Domains resembling popular DeFi protocols are pre-emptively blocked
Check which of Rabby's security partners have flagged your site using dappdetect's comprehensive scan
Rabby's team is technically sophisticated - provide detailed smart contract documentation and architecture
Rabby's most responsive support channel is their Discord server where team members actively help
Appeal to Scam Sniffer and GoPlus separately as Rabby automatically syncs their data
Rabby integrates with Scam Sniffer, GoPlus Security, and maintains its own blocklist. You may need to appeal to multiple providers to fully clear warnings.
Rabby's pre-transaction simulation feature can fail on complex DeFi interactions or new contract patterns, causing it to err on the side of caution and show warnings.
Yes, users can manually whitelist sites in Rabby, but this requires them to first see and dismiss the warning - most users won't take this risk.
Not necessarily. Most wallet warnings are false positives caused by overly aggressive automated detection systems. However, it's always good practice to run a security audit to ensure your site hasn't been compromised.
Studies show that security warnings reduce conversion rates by 85-95%. For a typical DeFi project, this can mean thousands of dollars in lost revenue per day. The sooner you resolve the warning, the less impact on your business.
This is not recommended. Users have been trained to trust wallet security warnings, and asking them to bypass these protections will damage your credibility and could be seen as a red flag itself.