Trust Wallet Phishing email

[UmerIdrees]

Today i receive an email from so called Trust wallet with the Subject "Immediate Action Required" and they are asking for KYC.

The email is received from notifications@calendly.com, and the link to do the KYC is also from the calendly domain, which I think is not related to Trust Wallet in any way.

If anyone received this email, do not click the link, as it is a phishing email.

[_act_]

I will not be surprised if the link is a page to a website where people will first need to enter their see phrase to proceed to do the KYC. If anyone put his or her seed phrase on the site, the attacker will know the seed phrase and use it to steal the coins the person has on the wallet. This is what I think of most because this scam is becoming again recently.

Or it might be a malware link but I guess it will be the first one that I explained. It is highly advisable not to click on the link at all.

[Chibit01]

The email is received from notifications@calendly.com, and the link to do the KYC is also from the calendly domain, which I think is not related to Trust Wallet in any way.

The calendly which I know is like a tool which makes work very easier for people who is controlling large amount of client and employees you connect to them and set some sort of reminders which could be sent across your team mates, how was they able to use same domain or they took advantage of the mail system to send that across.

And creating trust wallet don’t require the use of mail address so how are this scammers even thinking or even sending such mail and expect victim to fall for it, unless those who don’t give a second thought to what ever that comes into there mailbox.

[Coyster]

Trust Wallet is a non-custodial wallet, does the wallet ever require KYC verification? I am not too familiar with Trust Wallet, of course i do not use it because it is closed source and definitely not a safe wallet to use. I do not see any reason to complete KYC verification in a non-custodial wallet and i think people should be able to spot this as a scam.

I will not be surprised if the link is a page to a website where people will first need to enter their see phrase to proceed to do the KYC.

That would be it. And surprisingly, naive people are going to fall for it and lose their assets.

[UmerIdrees]

Or it might be a malware link but I guess it will be the first one that I explained. It is highly advisable not to click on the link at all.

I didn't click on the link so i do not know whether it ask for the seed phrase or where it lands and i advice everyone not even try doing it because it may install any malware too, who knows.

And creating trust wallet don’t require the use of mail address so how are this scammers even thinking or even sending such mail and expect victim to fall for it, unless those who don’t give a second thought to what ever that comes into there mailbox.

So the question arises where did they find my email  

[Chibit01]

And creating trust wallet don’t require the use of mail address so how are this scammers even thinking or even sending such mail and expect victim to fall for it, unless those who don’t give a second thought to what ever that comes into there mailbox.

So the question arises where did they find my email 

The more you get your email registered with some website the more likely you get it exposed to such thing, places like LinkedIn have been a very easy place for scammers to source mail without the profile owners even knowing that their email have been extracted, sometimes they also buy this mails form dark web where millions of compromised mail are being sold, unless your email is just used to register in one particular site and not on multiple places only then can you be surprised to receive phishing and funny mail from scammers.

[_act_]

Trust Wallet is a non-custodial wallet, does the wallet ever require KYC verification? I am not too familiar with Trust Wallet, of course i do not use it because it is closed source and definitely not a safe wallet to use. I do not see any reason to complete KYC verification in a non-custodial wallet and i think people should be able to spot this as a scam.

I do not also use the wallet, because it is a close source wallet. But the wallet does not require users to input their identity information anywhere on the wallet.

I didn't click on the link so i do not know whether it ask for the seed phrase or where it lands and i advice everyone not even try doing it because it may install any malware too, who knows

If you are not professional in it, you have done the best, although there is extra thing that you will do that will install malware on your phone, but it is best that you did not click on the link.

[FirmWars]

And creating trust wallet don’t require the use of mail address so how are this scammers even thinking or even sending such mail and expect victim to fall for it, unless those who don’t give a second thought to what ever that comes into there mailbox.

Trust wallet now have two options to back up your address secret phrase, if you want to back up your seed phrase on trust wallet, the first option you are going to see is back up to Google Drive, then the second option you will see is the Manual back up.

If you chose Google Drive back up, it will bring up an option that shows you all the emails that is logged in on your device and you will be asked to select the email you want to use. Some people who used the Google drive backup and submitted their email to trust wallet are going to fall victim.

So the question arises where did they find my email  

Did you do a Manual back of your trust wallet seed phrase or you used the Google drive option to backup your seed phrase? If you didn't use that Google drive backup option, then it means that your email must have leaked from other platforms that you have used it.

What I find so stupid of this scammers is how the content of the mail said you should do a KYC, meanwhile Trust wallet doesn't ask users to do KYC because the software is just a normal wallet and not a centralized exchange.

[ScamViruS]

So the question arises where did they find my email  

You may have registered on a website with that email, and hackers hacked the user database from that website. I have been receiving a lot of wallet related phishing emails in the past, and I used that email for a promotional event of Ledger Wallet and the hackers collected information from there. Because the database of Ledger Wallet users was leaked a long time ago.

So I think your information might have been leaked, maybe from some popular website.

[UmerIdrees]

Did you do a Manual back of your trust wallet seed phrase or you used the Google drive option to backup your seed phrase? If you didn't use that Google drive backup option, then it means that your email must have leaked from other platforms that you have used it.

I didn't do the google drive backup for my seed phrase as i think that is not good idea to store your seed phrases on the google drives. However, think for a moment that suppose i did backup on google drive and that information should only be stored on trust wallet servers.

How come a third party scamming site/person knows the email addresses of the users who backed up seed phrases on google drive  

[Chibit01]

And creating trust wallet don’t require the use of mail address so how are this scammers even thinking or even sending such mail and expect victim to fall for it, unless those who don’t give a second thought to what ever that comes into there mailbox.

Trust wallet now have two options to back up your address secret phrase, if you want to back up your seed phrase on trust wallet, the first option you are going to see is back up to Google Drive, then the second option you will see is the Manual back up.

If you chose Google Drive back up, it will bring up an option that shows you all the emails that is logged in on your device and you will be asked to select the email you want to use. Some people who used the Google drive backup and submitted their email to trust wallet are going to fall victim.

I understand the point you are making, but you don’t directly submit your email to trust wallet they might gain access to it but what you are automatically doing is granting them access to your cloud which if you are using IOS device they will ask for permission to access your iCloud and back it up there and if you are using android that’s when the access to your Gmail will be needed and if scammers have access to such mail then they won’t have need to send you such phishing mail as they can extract the backup key from the cloud without the owner knowing which is what makes every form of online storage for such information very dangerous.

[Wiwo]

Let be guided with the use of trust wallet most especially to newbies, because trust wallet seems to be very popular and commonly used by people who newly come into cryptocurrency since it allows forr multiple coins portfolio on like custodial wallets like blue wallet which focus only on bitcoin, Trust wallet has high vulnerability that allows alot if phishing to go one within is system and we need to get updated on that and how to avoid following their emails notifications and only interact via the app.

Good to bring this up, this can easily be misleading to newbies who may just click the link and begin to insert their wallet recovery details exposing themselves to the hackers.

[PostQuantumBTC]

Good to bring this up, this can easily be misleading to newbies who may just click the link and begin to insert their wallet recovery details exposing themselves to the hackers.

What that baffles me is how the newbies and other people do not know how writing their seed phrase on a website can be used by hackers to have access to their wallet and spend their coins, it is written on almost all wallets now that your seed phrase should not be seen by anyone.

[Wiwo]

Good to bring this up, this can easily be misleading to newbies who may just click the link and begin to insert their wallet recovery details exposing themselves to the hackers.

What that baffles me is how the newbies and other people do not know how writing their seed phrase on a website can be used by hackers to have access to their wallet and spend their coins, it is written on almost all wallets now that your seed phrase should not be seen by anyone.

Sometimes the problem arise from the basic understanding,  some newbies are not really carful to read and follow simple instructions,  seed phrase is a personal property only you uses it when you have need for it, if any third party services or apps ask for your seed phrase to connect to their services,  that alone os a big red flag to know that their are hacker.

Aside from not clicking links sent in emails, controlling how you use your security details and exposes yourself to public matters alot and newbies should take time to learn all the vital points.

[Rikafip]

Trust Wallet is a non-custodial wallet, does the wallet ever require KYC verification? I am not too familiar with Trust Wallet, of course i do not use it because it is closed source and definitely not a safe wallet to use.

Nope, Trust wallet doesn't have any sort of KYC. Well, at least they didn't have when I used it, and I don't think that they added it later.

So the question arises where did they find my email 

One of the websites that you used and where you shared that email address, either sold it or got hacked. As simple as that. They are sending these type of emails en masse, not caring whether you are Trust walelt user or not, and all they need is a couple of newbies not thinking straight for this attempt to pay off.

[_act_]

Nope, Trust wallet doesn't have any sort of KYC. Well, at least they didn't have when I used it, and I don't think that they added it later.

I am very sure about this, Trust wallet do not require KYC.

[albon]

One of the websites that you used and where you shared that email address, either sold it or got hacked. As simple as that. They are sending these type of emails en masse, not caring whether you are Trust walelt user or not, and all they need is a couple of newbies not thinking straight for this attempt to pay off.

I did not receive this message, and indeed this is called random targeting where such messages are sent to thousands of people who have their own emails. Despite the simplicity of this phishing attempt, many newcomers to this field who lack enough information about crypto wallets may end up clicking the phishing link. This can result in the loss of important KYC documents and in some cases they may even connect their wallets to the phishing website, which could lead to their assets being drained.

Therefore, the learning factor and gaining experience is the most important for any beginner, so they do not lose their assets due to ignorance or haste. Also, anyone who receives such messages repeatedly would be better off creating a new email account instead of continuing to use the same one.

[notblox1]

I am sure some people got tricked my this scam because most people accepted KYC verification as something normal 
But didnt owners of Trust wallet claimed that everyone who lost coins from their wallet will have to verify if they want get their coins refunded?

[Coyster]

Trust Wallet is a non-custodial wallet, does the wallet ever require KYC verification? I am not too familiar with Trust Wallet, of course i do not use it because it is closed source and definitely not a safe wallet to use.

Nope, Trust wallet doesn't have any sort of KYC. Well, at least they didn't have when I used it, and I don't think that they added it later.

Exactly what i thought. That basically means that the scammers are dumb and one has to be more stupid than they are to even fall for this. Because if your wallet does not require KYC, why would you fall for a KYC phishing attempt. There should be no chance at all.

But didnt owners of Trust wallet claimed that everyone who lost coins from their wallet will have to verify if they want get their coins refunded?

Yes they did, strict KYC. According to them, to verify legitimate claims, because of the number of claims they received. But that is not what the scammers are trying to take advantage of here. They are trying to deceive people through KYC to secure their wallets, when Trust Wallet does not request KYC in the first place.

[BABY SHOES]

Not only Trustwallet but also Metamask wallets are often targeted by phishing sites that share via email as if they are real from the official team.

Phishing sites are common... if you click it just asks to enter your seedphrase. Just be careful here.

So the question arises where did they find my email  

We never know than hackers get your email... maybe other websites that you list have been leaked so hackers use this to their advantage to spread phishing sites.