All BTC lost during "Cold Storage" > "Masterseed"

[Vojta5]

Hi all,
I will be very glad for any help in my stressful situation.. thanks in advance.

I had a single wallet backed-up with 12 words, running on two phones in parallel. Yesterday I decided to make a fresh start with new 12 words, so I took one of the phones, reinstalled Mycelium, created a new account, generated new 12 words backup, set up PIN, and tapped  "Cold Storage" > "Masterseed". I entered the old 12 words and the app showed a message like "successful spending" followed with the correct amount.

Since that (ca. 20 hours from now), both the phones show 0 BTC. The old-account phone shows "2 private keys" which, I think, is less than before. Using transactions listed by the old-account phone I located my money on "blockchain.com/btc/address/XYZ" - the amount is still shown there, no transactions happened during the critical time. The new-account shows "3 private keys" which is the default, I think.

Please, help. Yours,
Vojta

[bL4nkcode]

"blockchain.com/btc/address/XYZ" - the amount is still shown there, no transactions happened during the critical time.

That means your funds are still there, it might be some server or syncing error of mycelium which is common to them. Do you want to use another wallet to check your funds on your masterseed? You can use electrum either desktop or android version will. Just import the 12 word seed and you can spend your funds there.

[Lucius]

Vojta5, this is old problem with this wallet, your coins are safe on blockchain, but problem is in wallet which is not show balance probably because of problem with sync. This is not something that is nice to see when you open wallet, some users may think they are hacked when they see 0 balance.

Check this thread for more info, maybe post from BitMaxz may be helpful for you : https://bitcointalk.org/index.php?topic=5091798.0

[Vojta5]

Well, my real problem begins now! It seems that I have just been tricked and robbed.
A user of this forum advised me by PM to use "ledgertoolkit.com" to inspect stuff. In the stress, I neglected security and typed my 12 words there. Within few minutes, transactions started to appear on blockchain.com, forwarding and splitting the BTC.

[TryNinja]

Well, my real problem begins now! It seems that I have just been tricked and robbed.
A user of this forum advised me by PM to use "ledgertoolkit.com" to inspect stuff. In the stress, I neglected security and typed my 12 words there. Within few minutes, transactions started to appear on blockchain.com, forwarding and splitting the BTC.

Well... sorry OP, but your coins are now gone. If anything helps, I've started flooding his website with fake seeds to prevent him from doing the same with other people. :/

[bitmover]

Well, my real problem begins now! It seems that I have just been tricked and robbed.
A user of this forum advised me by PM to use "ledgertoolkit.com" to inspect stuff. In the stress, I neglected security and typed my 12 words there. Within few minutes, transactions started to appear on blockchain.com, forwarding and splitting the BTC.

Which user? Please post his name here so we can tag him so he can't fool anyone else. Is he a newbie?
Post his profile here.

[Vojta5]

User:
dj6230
https://bitcointalk.org/index.php?action=profile;u=128222

The PM from dj6230 was:
Hi,
Mycelium uses the same bip39 standard and derivation paths as Ledger so let's use the Ledger toolkit to try to locate the address holding the funds:
1. Open https://ledgertoolkit.com
2. Where it says "BIP39 Mnemonic" paste or type your 12 word seed from Mycelium
3. Scroll down and click "BIP32"
4. For client select "Coinomi, Ledger"
5. It will show ALL BTC addresses derived from your 12 word seed, try to locate the btc address hodling the funds
Reply when you have found it and i will show you how to import it again with the funds visible.

[TryNinja]

User:
dj6230
https://bitcointalk.org/index.php?action=profile;u=128222

The PM from dj6230 was:
Hi,
Mycelium uses the same bip39 standard and derivation paths as Ledger so let's use the Ledger toolkit to try to locate the address holding the funds:
1. Open https://ledgertoolkit.com
2. Where it says "BIP39 Mnemonic" paste or type your 12 word seed from Mycelium
3. Scroll down and click "BIP32"
4. For client select "Coinomi, Ledger"
5. It will show ALL BTC addresses derived from your 12 word seed, try to locate the btc address hodling the funds
Reply when you have found it and i will show you how to import it again with the funds visible.

You should have read his trust history.

"Shilling scam website bip39tools.org via PM to users. This website sends your seed info to the server via POST. DO NOT USE and DO NOT TRUST this user"
"Scammer, hacked/sold account, do not trust."
"Several unresolved scam accusations against this user."

etc...

Please create a trust flag against him so we can support it. This will make it harder for him to scam people.

1. Go here: https://bitcointalk.org/index.php?action=trust;addflag=128222
2. Select the second option "This user violated a casual or implied agreement with me, resulting in damages."
3. Complete the fields and create the flag. Then link it here.

[bitmover]

You should have read his trust history.

....

etc...

Please create a trust flag against him so we can support it. This will make it harder for him to scam people.

Personally, I think that flags and trust system are basically useless to most newbies.

Flag is hidden inside the trust history. There should be a great sign in his profile page (newbies don't click in this trust button, which is shining to us, but not to newbies).
This forum profile is too complicated, and newbies barely understand it. This case is just a proof of that.

A user with -7 trust was able to cheat him.

[TryNinja]

A user with -7 trust was able to cheat him.

What is an light orange -7 in someone's profile? This doesn't really mean a lot.

At least the flag puts an "Warning: Trade with extreme caution!" red warning on his trust score, that also shows up in PMs.

[Vojta5]

Thank you for taking care of the forum and fighting the scammers..
Actually, I started following the malicious advice as soon as I obtained the message through e-mail notification.
This way, nervous newbies like me can miss flags/trust scores etc.

[The Sceptical Chymist]

A user of this forum advised me by PM to use "ledgertoolkit.com" to inspect stuff.

I was confident OP hadn't lost his funds right up until I read this, and my heart sunk a little bit afterward.  Sorry you got scammed, and I'm not going to rub salt in your wounds because it's a rookie mistake that a lot of people could have made.  Hopefully you realize now to NEVER type that seed phrase into anything that's not your wallet, especially some website like that.  Ugh. 

I've been scammed out of bitcoin before, and it feels like someone just robbed your house.  Sorry for your loss, OP.

A user with -7 trust was able to cheat him.

Yeah, and unfortunately that's probably always going to be possible.  Even if the trust flag was visible under the avatar, there would still be people falling for crap like this or doing trades with a -7 member.  I do agree that those flags ought to be more visible, though.

[HCP]

I have created a "Type 1" flag for this user here: https://bitcointalk.org/index.php?topic=5186330.msg52513512#msg52513512

Please add your support to help prevent others getting scammed by this user.