What could have went wrong?

[promise444c5]

Here’s what I think might have happened to the victim:

Their Microsoft account was compromised and somehow the attacker must have accessed the seed.. But the only possibility to get access is if the victim actually saved seed  unencrypted through any medium that can be accessed by just signing into Microsoft account . Else ,  Trust wallet has a  “backup to Google Drive” method which is always encrypted . That can’t be accessed easily either without getting access to Google account. So it’s either the first, victim couldn’t remember engaging with some unusual activity or the victim is just  bluffing.

https://www.reddit.com/r/trustwalletcommunity/comments/1rdz7gv/stealing_crypto_right_in_front_of_my_screen

Trust wallet is close-sourced and can’t be fully trusted.

[Floxynice]

The first error here is op admiting he forgot where he kept the seedphrase.  If he has ever stored or sent his seedphrase online, either by:
Snapping it saving it on his gallery
Storing on iCloud
anywhere in his device or anywhere at all, the seedphrase could be compromised.

Lesson to newbies, "resist the urge to save your seedphrase online, write it out instead and save in a safe place."

[PX-Z]

The first error here is op admiting he forgot where he kept the seedphrase.  If he has ever stored or sent his seedphrase online, either by:
Snapping it saving it on his gallery
Storing on iCloud
anywhere in his device or anywhere at all, the seedphrase could be compromised.

Lesson to newbies, "resist the urge to save your seedphrase online, write it out instead and save in a safe place."

Its always user's fault, either their seed was compromised through their devices where it it was saved, worst if it was saved online. That's the worst possible scenario, and the user? They always denied it like they do nothing and the wrath of heaven (hackers) just select them randomly from all over the people on crypto space.

[SilverCryptoBullet]

The first error here is op admiting he forgot where he kept the seedphrase.  If he has ever stored or sent his seedphrase online, either by:
Snapping it saving it on his gallery
Storing on iCloud
anywhere in his device or anywhere at all, the seedphrase could be compromised.

Lesson to newbies, "resist the urge to save your seedphrase online, write it out instead and save in a safe place."

Saving/ backing up wallet seed phrase is very important for ability of accessing the wallet anytime later even if the original wallet and device were broken and no longer are usable.
It's very vital in protection the fund stored in that wallet.

Saving/ backing up a wallet must be done very carefully, properly and there are many steps to do it rightly.
How to back up a seed phrase?

Seed Backup Threat Model
Loss due to destruction
Loss due to complexity / not being able to restore from backup
Loss to an attacker

Terrible Backup Schemes
Let's begin by going through some common forms of backing up seed phrases that are incontrovertibly prone to failure.

Storing your (unencrypted) seed phrase in any online service. This includes:

Taking a photo of your seed phrase.
Any note taking apps that get synced to the cloud.
Services that sync files from your phone / laptop to the cloud.

[DPHOR]

I don't know actually if he updated his trust wallet. I had there was a hack on trustwallet from this who updated their wallet on that particular time, I could be wrong as I can't actually get the information correctly or to where I might have comes across such information in the forum here or from their site.
There were people who complained same thing about their funds missing from their trustwallet, this is to say that you shouldn't trust such wallet anymore and couples that it is not open source code wallet, that's why it's advisable to always use and Open source code wallet to store your funds such as electrum wallet or hardware wallet that is more trustworthy.

[7juju]

The gut he has to keep storing funds on a crypto wallet that he can't remember where he kept the recovery seed is the most irresponsible thing sentence I've read online this year. I hope this teaches someone a lesson about how important it is to keep recovery seed very safe first before storing funds on the crypto wallet.

Since he can't remember were he kept the seed phrase, it is very likely that someone has found it and made good use of it. Common sense should have made him realise that since he can't account for the seed phrase, he should move the funds to another wallet. Three things likely happened here that led to his coins being stolen. Either he saved his seed phrase online, or someone found it were he kept it offline, or he connected his wallet to a malicious website. Coins can't just move without any of the above happening.

[CryptSafe]

Most at times what we might be thinking is the problem or the cause of the hack or theft of assets might really not be the case, it might be something else entirely and far from where our thoughts might be. There are various ways hacker's can get access to devices. Maybe OP might have downloaded an app or something that could have granted the hackers access to OPs device and there the are able to do their dirty job of stealing OP assets. Sometimes the little things we ignore might likely be where the problem is.

[sunsilk]

I used to receive fake microsoft update and sign ins and that might be the culprit on that situation of the victim.

He's too curious and probably went on a panic upon seeing that and clicked the phishing link that's attached on that email.

And then, boom. That's how he's got phished when he willingly input the details about his wallet.

[nakamura12]

If the owner didn't save the seed phrase somewhere or inputted the seed phrase in a pishing site then it's more likely that the device was compromised like the owner downloaded a malware that's why the wallet is compromised and the funds were stolen. It's also possible that the seed phrase might have been leaked since as you can read on the screenshot that the owner said he didn't remember where he put his seed phrase then it could be that he might have saved it on a cloud.

[Furball808]

Is really all that the information? OP could have kept some things hidden maybe due to embarrassment but it is possible he engaged with the token sent to him or he did not realize that he downloaded something or signed his account to a sketchy website. It also seems like he is using a centralized exchange which are prone to scams like this one.