The dating part and the wallet part are separate decisions
Someone you met through a dating app sends a mining-pool or investment page and asks you to connect your wallet. The relationship context does not tell you what that page will be allowed to do. Treat the request as a permissions question first: what is being asked for, what would it permit, and what can you check before anything is approved?
A normal connection request is not automatically an unlimited spending approval. Those are different actions with different consequences, and the rest of this page keeps them apart.
The FBI describes unsolicited dating/social contacts building trust, recommending fraudulent liquidity mining and inducing wallet permissions that can let criminals move the approved assets. Source
That pattern is why the link’s permissions matter more than how convincing the introduction felt. For the broader romance-investment pattern, see how hybrid romance-investment scams operate.
Connection and approval are not the same permission
A connection lets a site see the account you chose and interact with it within the limits the wallet shows. A token approval is a separate permission that can let a contract move a specific token. Approving one is not the same as doing the other, and disconnecting is not the same as revoking.
MetaMask says the connection request shows the account being connected and what a dapp can and cannot do, with connected permissions reviewable in Permissions. Source
Disconnecting a dapp does not revoke token approvals; a disconnected dapp may still move tokens previously approved. Source
So “I disconnected it” answers a different question from “can it still move my tokens?” Keep both questions open until each is checked against the wallet provider’s own documentation.
Requested action, possible permission, next safe check
The table below is original decision support, not a description of any specific wallet’s screens. Labels are deliberately cautious because the reviewed facts do not establish universal menus or wording.
| What the page asks | What it may involve | Next safe check |
|---|---|---|
| “Connect your wallet” | A connection showing the account and the site’s stated abilities | Read the request details before approving anything; if the domain’s legitimacy is in doubt, do not connect |
| “Approve token use” or a similar spending request | A token approval, which is separate from connection | Check the wallet provider’s own token-approval guidance, reached independently, before acting |
| “Sign in” or another prompt you did not expect | Unclear from the reviewed facts | Stop and read the wallet provider’s official explanation of that prompt type; do not guess |
If you are concerned about whether the domain is legitimate, the FBI’s guidance is to avoid connecting the wallet, and it provides an IC 3 reporting route for suspected schemes.
The FBI advises not connecting a wallet when concerned about a domain’s legitimacy and provides an IC 3 reporting route for suspected schemes. Source
Branches: what state are you actually in?
You have not approved anything
You are in the simplest position. Do not connect or approve while the domain’s legitimacy is unresolved, and do not install a checker or run a test transaction to find out. If you want to understand the offer better, ask the contact for the plain business explanation in writing and compare it with the pattern described in the relationship guide. A romantic introduction is not a reason to skip that step.
You are unsure what was approved
Do not rely on memory or on the contact’s reassurance. Review the connected permissions in the wallet, as the provider’s guidance describes, and separately look up the provider’s own token-approval documentation reached independently. Do not use a link the contact sent for either step. If you cannot tell what state you are in, stop interacting with the untrusted page and contact the wallet provider’s official support.
You already disconnected
Disconnecting is a reasonable step, but it is not revocation. A disconnected site may still move tokens you previously approved, so the token-approval question remains open. Check the provider’s official token-approval guidance, and remember that no step here is a promise that anything already moved can be recovered.
What a public-source review can and cannot do
A public-content review can help you organize what is openly visible about an app or domain mentioned in the conversation — for example, how the offer describes itself on accessible pages. TraceSeek’s public content analysis retrieves and summarizes accessible profile content, and self-disclosed professional information has to be attributed to its source; generated interpretations are not verified personal facts. It cannot inspect a private wallet, authorize or revoke a contract, or attribute wallet ownership.
If you want that optional public-source step, the app page explains the documented inputs. A username scan uses a supplied username to find publicly accessible profile candidates, and the documented scan is described as taking 20–30 seconds with a free first scan. Those figures apply to the username scan, not to image or deep-search features, and no result proves who controls a wallet or that an investment offer is genuine.
Keep the decision with you
- The dating context is not a permission.
- Connection and token approval are separate; disconnection is not revocation.
- Use the wallet provider’s own documentation and support, reached independently, rather than links from the contact.
- Do not send funds, approve spending, or run a test transaction to resolve doubt.
- Do not try to inspect the other person’s private accounts, finances or location; the question here is what you permit, not what you can prove about them.
A relevant next step is to name the exact permission being requested, then check it against the provider’s official guidance before anything is approved.