Another attempt from Impersonators of Trust Wallet Support to steal.

[Queentoshi]

There are many criminals who have tripled their effort to steal bitcoins from people who will fall victim to their method of scamming. Trust wallet is one of the most widely used wallets by some investors, and scammers have devised a way to trick new investors who are not vast in information to expose their seed phrase.

A friend of mine received these emails which are from scammers.




Now because all these kinds of scams have always been existing and we that are members of this forum are constantly exposed to it before we become victims, the real risk of becoming victims is not with us here, but new investors who are not so informed to be able to know these scams. We should also let people outside the forum be aware that these kinds of scams exist and will be a thing in this season before the halving.

I would also like to say that although this were scammers imitating trust wallet support, they could choose another wallet tomorrow, to imitate their support and see the victims they can get.

[1714548963]

1714548963

[1714548963]

1714548963

[1714548963]

1714548963

[1714548963]

1714548963

[tranthidung]

A non custodial wallet gives us private keys or mnemonic seeds and only users own those keys or seeds.

A non custodial wallets ask for KYC from users is already weird.
Another weird request is to KYC, users have to enter wallet seed words.

Only combine two requests, it's enough to don't follow the request.

How did you get the phishing email?

Very possibly, your email address was in data breaches. Check with https://haveibeenpwned.com/ and if possible, I recommend you to use a new email after all.

[Hewlet]

I would also like to say that although this were scammers imitating trust wallet support, they could choose another wallet tomorrow, to imitate their support and see the victims they can get.

this has always been their strategy. They will clone a particular wallet and model their message in such a way that looking at it for the first time, if you are not careful you might just give them your details and end up losing all your holdings.

The truth is that victims of these scammers are not just newbies that are still new to the industry but old investors still fall victim of this tactics.

Everyone should be careful on how they handle their security. you can't know it all as long as it concerns scammers. As this format leaks out to the public, they will device new means of getting their naive victims and the best thing to do is to never give out your seed phrase to any one or impute it in any other site apart from where it is required.

don't be the victim. Play safe.

[Die_empty]

There are many criminals who have tripled their effort to steal bitcoins from people who will fall victim to their method of scamming. Trust wallet is one of the most widely used wallets by some investors, and scammers have devised a way to trick new investors who are not vast in information to expose their seed phrase.

Trust wallet is not recommendable for Bitcoin investors because it is not open-sourced. it is better to keep funds in open-source wallets like Electrum. Any message that requires your password or seed phrase is a scam, it can be likened to giving a random person the keys to your safe. We have to be aware that there will be an increase in phishing and other scam activities as the crypto industry is receiving much attention.    

Now because all these kinds of scams have always been existing and we that are members of this forum are constantly exposed to it before we become victims, the real risk of becoming victims is not with us here, but new investors who are not so informed to be able to know these scams. We should also let people outside the forum be aware that these kinds of scams exist and will be a thing in this season before the halving.

I would also like to say that although this were scammers imitating trust wallet support, they could choose another wallet tomorrow, to imitate their support and see the victims they can get.

You did the right thing OP to expose this trick and I hope nobody will fall for this scam. But the problem is that people are not willing to learn before investing. They are mostly driven by the desire to make quick money. One of the important topics that anyone who has an interest in Bitcoin should learn is wallet security.

[Charles-Tim]

This is an old common crypto scam. But probably some newbies can fall victims of it. If we should take a look at it, when you generate a wallet and want to backup the wallet, a reputed wallet will warn you that the seed phrase must not be lost, else you will lose your coins. They clearly state that and some will also states that if anyone sees the seed phrase that the coin can be stolen by the person. I am always surprised if anyone can click on a link and input his seed phrase on a website. That is foolishness to an extent.

[lovesmayfamilis]

Is email required when creating this wallet? I had it installed quite a long time ago, but I know for sure that there was no mail there. Then why is your friend embarrassed when receiving such a letter?
The funny thing is that scammers send letters to those who are not associated with crypto at all. My neighbor was their target, and after learning that he shouldn’t respond to such letters, he got the impression that he shouldn’t associate his interests with crypto at all.
People will not look for correct information if they have doubts at the first stages, and they will most likely avoid cryptocurrencies. This is also the problem.

[Dimitri94]

There are many criminals who have tripled their effort to steal bitcoins from people who will fall victim to their method of scamming. Trust wallet is one of the most widely used wallets by some investors, and scammers have devised a way to trick new investors who are not vast in information to expose their seed phrase.

A friend of mine received these emails which are from scammers.

These things are must know for new users. Various types of phishing sites or harmful links may come in the email. From which there is no chance to get rid of without taking precautions. Who are older in forums always ignore such messages. But the problem arises in case of newbies. Note that non-custodial wallets will never ask for KYC or others information. If only your private key and phrase are safe, your assets will not be at risk. Those who do not know make these mistakes. It is important to be aware of any work related to financial matters.

[Lucius]

Is email required when creating this wallet? I had it installed quite a long time ago, but I know for sure that there was no mail there. Then why is your friend embarrassed when receiving such a letter?
~snip~

I'm pretty sure that e-mail is not required when installing that wallet, because I don't see any good reason why it would be necessary for any mobile/desktop wallet, except in the case of Electrum where there is a 2FA wallet that is linked to e-mail.

However, I think there is a reason why some users of this wallet think they have received a legitimate e-mail, and it concerns the option that allows users of this wallet to buy cryptocurrencies within the application. For some of these transactions it is necessary to use e-mail. Of course, this does not mean that anyone should believe in the authenticity of e-mails that they receive in their inbox, but that they should be verified by contacting official support and asking for their opinion.

...Next, MoonPay will ask you to enter your email address and click on ‘Continue.’ This will allow the provider to send you a six-digit verification code. Proceed to enter the verification code and click on ‘Continue.’ From there, MoonPay will require you to enter personal details like your name, date of birth, billing address, and debit card details. Next, confirm the transaction.

[Nwada001]

Without giving the email a second thought, and as someone who has crypto knowledge, we should all be aware that wallet creation doesn't require the use of email, and such email can never come from the wallet team but can only be information from scammers.

So seeing such emails as I have been receiving them for a very long time, I have to abandon the email, regard them all as scams as they should be, and report them to your email provider so that you can't receive such emails again.
 
Scammers have even gone far beyond this sending or email; it's only those who are not technically enlightened of how crypto and it's wallet work will be able to fall prey to an email received for a faulty wallet.

[Myleschetty]

I am not used to the mode of operation of Trust Wallet support but there's no way a genuine platform support will contact their users through email, or social media platforms in the first place if the person didn't contact them first.
Another thing is that people need to familiarise themselves with the genuine information about the support service of the platforms, and wallets they use in other not to be the victim of scammer and online theft.

[Coyster]

This is a poorly constructed scam attempt, everything about it screams that it is a scam and i don't expect anyone to fall for this, not even those who are new to the crypto industry. Never share your seed phrase or type it anywhere, except you are importing your wallet into another software or device. If you receive any message that tells you to expose your seed phrase, just delete it, there is no need to verify its authenticity, because it is definitely from scammers.

Is email required when creating this wallet? I had it installed quite a long time ago, but I know for sure that there was no mail there.

No, an email address is not required when creating a new wallet in Trust wallet.

[Dr.Bitcoin_Strange]

Is email required when creating this wallet? I had it installed quite a long time ago, but I know for sure that there was no mail there. Then why is your friend embarrassed when receiving such a letter?
The funny thing is that scammers send letters to those who are not associated with crypto at all. My neighbor was their target, and after learning that he shouldn’t respond to such letters, he got the impression that he shouldn’t associate his interests with crypto at all.
People will not look for correct information if they have doubts at the first stages, and they will most likely avoid cryptocurrencies. This is also the problem.

Nope, it doesn't require an email address to create a wallet on that app, although there is a but....

As a matter of fact, I stopped using trust wallet in the early months of last year after I got some good reasons from the forum as to why I should not use a trust wallet. But just last week, a friend wanted to send me some payments via the BSC network and I just needed to generate a quick wallet, so I downloaded the trust wallet and created a new wallet.

During the last stage of creating the wallet, I was asked to back up my 12 secret phrases to Google Drive. I was like,'Oh 'sh*t, what sort of nonsense is with this wallet?'(that was a new feature added and some other new outlook it saw).

First of all, it's quite unbelievable to ask users to backup their secret phrases to an online space like Google. Secondly, before you can backup your secret phrase to Google Drive, you should have had a registered Google account (gmail), through which your email will be saved by TrustWallet. So, nothing to be surprised about; they can get users email if they backup their phrase to Google Drive.

I suspect that's the only way they can get users  emails.TrustWallet is one of the most unsafe wallets to use; it's highly not recommended.

[Helena Yu]

I was not wrong to not care about any message that send to my mail.

No, an email address is not required when creating a new wallet in Trust wallet.

Although it's not required, but the wallet is closed source and when you want to install the wallet, there's a description the apps will access bla bla bla and you need to check it in order to install the apps. So there's a possibility they can know the email address without need the user to submit it.

[alastantiger]

There are many criminals who have tripled their effort to steal bitcoins from people who will fall victim to their method of scamming. Trust wallet is one of the most widely used wallets by some investors, and scammers have devised a way to trick new investors who are not vast in information to expose their seed phrase.

There are many types of Trust Wallet scams and the one above that the OP has depicted is called the Support scam. The other types of scams that scammers do using Trust Wallet are;

• Trust Wallet Wallet Scam :-

Scams perpetrated by scammers on Trust wallet. They would imitate Trust Wallet User Interface, they create a backdoor to trick some newbies to into providing share their details.

• Trust Wallet Email Impersonation:-

Scammers will impersonate Trust Wallet email type address and domain name and send emails whose contents claim to offer account validation or promotions, thereby the users to click on their fraudulent links.

• Trust Wallet fake verification process:-

In this one, the scammers send a fake verification process with a link leading where users will be asked to enter their recovery phrase. After the newbie has entered their recovery phrase, they will then be redirected to the actual Trustwallet website, to create a false sense of security.
[/list]

[sokani]

There are many criminals who have tripled their effort to steal bitcoins from people who will fall victim to their method of scamming. Trust wallet is one of the most widely used wallets by some investors, and scammers have devised a way to trick new investors who are not vast in information to expose their seed phrase.

I don't really see anything sophisticated about the phishing link attempt, it's mostly newbies that would take this kind of bait. Most veterans know that trust wallet don't require an email when creating a wallet and I don't think there's any wallet that requires such. I think the recipient's email address must have been harvested from a website where he signed up or gotten from a crypto platform where he posted it. This is one of the reasons why it's not advisable to post your email address on public platform.

[Alpha Marine]

So many red flags that a newbie should be wary of.
First, it's the email. How did Trust Wallet get his email? He didn't use email to open the wallet, so how did they get his email address? That alone should make him very skeptical.

Secondly, how's a noncustodial wallet asking for KYC? The purpose of a noncustodial wallet is so you stay anonymous so what's the use for KYC?

It's so sad people still fall for things like this.

[Faisal2202]

These phishing emails is not something new that we call it scammers have tripled their efforts, and while they don't it is a very old phishing technique to scam new users especially. As we all know crypto market is expanding and it will expand more due to the ETF's approval and maybe due to the Halving event. As all smart people who are not into crypto, want to make some profit out of it now, and many who did not know about crypto are now interested due to the ETF's approval.

This interest of people drives them toward the crypto sphere but with zero knowledge, so most of these newbies become prey to these scammers who are always on the hunt of these normies. I prefer everyone to remain caution, even if the person is an old member of this forum, we should always know the consequences of our actions.

[Hyphen(-)]

There are many criminals who have tripled their effort to steal bitcoins from people who will fall victim to their method of scamming. Trust wallet is one of the most widely used wallets by some investors, and scammers have devised a way to trick new investors who are not vast in information to expose their seed phrase.

Is Trust Wallet actually widely used by bitcoin investors? I doubt that because it is a closed-source wallet, and investors prefer open-source wallets that have enhanced security and an offline wallet to prevent phishing emails and messages, just as you mentioned.

For Trust Wallet to be closed-source and been always connected to internet, scammers will always look for ways to bridge the security or attempt ways that can make users easily expose their private keys.

Now because all these kinds of scams have always been existing and we that are members of this forum are constantly exposed to it before we become victims, the real risk of becoming victims is not with us here, but new investors who are not so informed to be able to know these scams. We should also let people outside the forum be aware that these kinds of scams exist and will be a thing in this season before the halving.

I would also like to say that although this were scammers imitating trust wallet support, they could choose another wallet tomorrow, to imitate their support and see the victims they can get.

To avoid all these, use an offline wallet if you are holding a very good amount of Bitcoin.

The offline wallet is expensive and not often available for every new investor; therefore, open-sources like the Electrum wallet can be used instead of the trust wallet because it is more secure than Trust Wallet.

[AakZaki]

Phishing via email is commonplace and this is a fairly old method, now I see phishing via Twitter more often which has a blue tick because blue ticks can be bought easily and are cheap. and what's even smarter is that hackers hack the Twitter account of a new project that has a lot of followers and create a status in the form of a phishing link. This happened a few days ago on a project that I follow. Luckily I was alert enough and didn't put anything in.

[Luffygroove]

It's crucial to remind our community consistently about the need to stay vigilant. Always keep your wallet's private key to yourself, avoiding sharing it even with those you trust initially. This stands as an essential, unspoken guideline we must adhere to. Additionally, I strongly recommend minimizing KYC involvement. Resist revealing your real identity easily in the crypto space. It's a belief we should share beyond this forum, particularly on social media. Many newcomers seek information on crypto through these platforms, making it vital to spread awareness about privacy and security practices.