[PSA] Fake Trezor wallet website

[TravelMug]

Specially for newbies out there, there is a new fake Trezor website:

Code:

http://trezor.io-wallet.com/

Another red-flag is that the website is not secure. And then it will force/ask you to enter your 12/24 word seed recovery.

Kindly report this site to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[LTU_btc]

Thanks for warning. Unfortunately, war with phishing scam websites is never ending. If we manage to close one website, 10 new websites appears then.
I think it would be better to report this website to their hosting provider to shut it down. Reporting to Google isn't always effective, they don't react always.

[Coyster]

Unfortunately, war with phishing scam websites is never ending. If we manage to close one website, 10 new websites appears then.

As long as we continue to use the internet, then we should expect to be targeted by various types of phishing, malware, fake giveaways and all the rest of them, there is no perfect end to them.

But they mostly take the same pattern, so reporting one is like reporting ten others, those who are observant would learn from one exposed scam attempt, and know when other scammers are trying to do the same thing.

[Kaliecious]

thank you for sharing this information, every Trezor user must be careful about this. many phishing websites lurking about their data such as phishing Myetherwallet are mostly encountered
must be observant pay attention to the sites they access.

[mk4]

Reporting to Google isn't always effective, they don't react always.

I think they do react, just not as fast as we wanted to. One thing's for sure though, it's going to need a good number of reports for Google to actually act upon it. Fortunately, reporting a site to Google only takes a few seconds so there's really nothing to lose by trying to report: https://safebrowsing.google.com/safebrowsing/report_general/

[Pmalek]

I am going to send them a seed later on. 24 beautifully thought-out words that describe these low-lives and their mothers. I suggest we all do it. We can even have a contest who creates the best seed while the site is still up. 

[LTU_btc]

Reporting to Google isn't always effective, they don't react always.

I think they do react, just not as fast as we wanted to. One thing's for sure though, it's going to need a good number of reports for Google to actually act upon it. Fortunately, reporting a site to Google only takes a few seconds so there's really nothing to lose by trying to report: https://safebrowsing.google.com/safebrowsing/report_general/

Yeah, reporting to Google isn't bad thing too. But I remember case with Bitcointalk.to phishing website. It was reported by our forum members so many times and they never removed it.

[Bttzed03]

These fake/phishing sites just keep popping out of nowhere don't they? Can anyone link me to a comprehensive list of fake Trezor wallet or other hardware wallet websites known to date? If there is none yet, I think there should be one. I would like to use it also and update a topic I made in our local board about crypto wallets.

[mk4]

These fake/phishing sites just keep popping out of nowhere don't they? Can anyone link me to a comprehensive list of fake Trezor wallet or other hardware wallet websites known to date? If there is none yet, I think there should be one. I would like to use it also and update a topic I made in our local board about crypto wallets.

While I don't know if such a list exists, I personally find it pointless. What people needs to know is that the only legitimate site is Trezor.io and nothing else. It's a lot easier that way. If we do have a list, it will endlessly be added up with so much scam sites as the scammers could just purchase new domains anyway every time their sites gets blocked/flagged. So yes, they would keep popping out out of nowhere.

[Chikito]

Found a lot Scammer use fake Tezor to scamming people, I am always checked daily and subscribed when someone out there already made the similar site.

Suddenly today found more like OP after reading his post.

Fake trezor

Code:

https://trezor.best

Attention! a critical error has occurred in the trezor hardware device, to avoid asset loss, enter a phrase of 12, 18 or 24 words in the initial window and click Continue

look like Scammer modus tries to get the mnemonic seed, Newbie and beginner should be careful. this is an old issue and always available every day. Real Trezor never asks your mnemonic seed.

[DdmrDdmr]

This is a pretty recurring modis operandi to try to trick both Ledger and Trezor hardware wallet owners into handing out their 24 word mnemonic. I don’t know how many people fall for it (not many I guess), put perhaps the card provided with the device should make it adamantly clear that they, as a company, will never ask you for your mnemonic (you know, in big bold red letters).

[mk4]

I don’t know how many people fall for it (not many I guess),

Probably not a lot, but my guess that scammers are still doing this is simply because though the success rate is low, if they manage to trick someone, they could potentially get away with thousands to hundred thousands to millions. Basically it's somewhat like a lottery. Idunno.

put perhaps the card provided with the device should make it adamantly clear that they, as a company, will never ask you for your mnemonic (you know, in big bold red letters).

People don't like reading I guess. 

[lancelot18cryp26]

Watch out for all kinds of fake links and sites.
Even the hardware wallets have vulnerabilites. Safest way to store coins is by using core wallet with a strong password.

[LTU_btc]

Watch out for all kinds of fake links and sites.
Even the hardware wallets have vulnerabilites. Safest way to store coins is by using core wallet with a strong password.

Can you explain how Bitcoin Core can be safer option thand hardware wallet? Actually, properly made paper wallet is safest place to store your coins.

[GreatArkansas]

Code:

http://trezor.io-wallet.com/

WhoIs information.. (http://whois.domaintools.com/io-wallet.com)
The domain is 12 days old.
And we can also assure that this domain will be taken down as soon as possible if it will be proven that it is really FAKE or scam website if we will report it to its registrar;
which is the Onlinenic Inc OnlineNIC, Inc. (http://www.onlinenic.com)
Let's help to report it to their registrar like sending an e-mail to the registrar of that domain here: abuse@onlinenic.com

[CryptoTuhin]

Thank you so much for warning because I wanted to invest a good amount of money on this project soon but after seeing this message I think this project is actually a scam.

[DdmrDdmr]

<...>

Invest in what project?

We’re talking about a hardware wallet that is one of the top two on the market, which is as legit as you can get, but that has some parasite scammers that clone the site to try to either scam you during the sale, or trick you into thinking that your device is faulty, and that you need to provide your private keys to resolve the alleged issue.

The key is to always go to the original site to make a purchase, or get information. The only pitfall is is you may promptly go to "a" site, and not "the" site due to the lack of awareness and due diligence.