What could have went wrong?

[promise444c5]

Here’s what I think might have happened to the victim:

Their Microsoft account was compromised and somehow the attacker must have accessed the seed.. But the only possibility to get access is if the victim actually saved seed  unencrypted through any medium that can be accessed by just signing into Microsoft account . Else ,  Trust wallet has a  “backup to Google Drive” method which is always encrypted . That can’t be accessed easily either without getting access to Google account. So it’s either the first, victim couldn’t remember engaging with some unusual activity or the victim is just  bluffing.

https://www.reddit.com/r/trustwalletcommunity/comments/1rdz7gv/stealing_crypto_right_in_front_of_my_screen

Trust wallet is close-sourced and can’t be fully trusted.

[Floxynice]

The first error here is op admiting he forgot where he kept the seedphrase.  If he has ever stored or sent his seedphrase online, either by:
Snapping it saving it on his gallery
Storing on iCloud
anywhere in his device or anywhere at all, the seedphrase could be compromised.

Lesson to newbies, "resist the urge to save your seedphrase online, write it out instead and save in a safe place."

[PX-Z]

The first error here is op admiting he forgot where he kept the seedphrase.  If he has ever stored or sent his seedphrase online, either by:
Snapping it saving it on his gallery
Storing on iCloud
anywhere in his device or anywhere at all, the seedphrase could be compromised.

Lesson to newbies, "resist the urge to save your seedphrase online, write it out instead and save in a safe place."

Its always user's fault, either their seed was compromised through their devices where it it was saved, worst if it was saved online. That's the worst possible scenario, and the user? They always denied it like they do nothing and the wrath of heaven (hackers) just select them randomly from all over the people on crypto space.

[SilverCryptoBullet]

The first error here is op admiting he forgot where he kept the seedphrase.  If he has ever stored or sent his seedphrase online, either by:
Snapping it saving it on his gallery
Storing on iCloud
anywhere in his device or anywhere at all, the seedphrase could be compromised.

Lesson to newbies, "resist the urge to save your seedphrase online, write it out instead and save in a safe place."

Saving/ backing up wallet seed phrase is very important for ability of accessing the wallet anytime later even if the original wallet and device were broken and no longer are usable.
It's very vital in protection the fund stored in that wallet.

Saving/ backing up a wallet must be done very carefully, properly and there are many steps to do it rightly.
How to back up a seed phrase?

Seed Backup Threat Model
Loss due to destruction
Loss due to complexity / not being able to restore from backup
Loss to an attacker

Terrible Backup Schemes
Let's begin by going through some common forms of backing up seed phrases that are incontrovertibly prone to failure.

Storing your (unencrypted) seed phrase in any online service. This includes:

Taking a photo of your seed phrase.
Any note taking apps that get synced to the cloud.
Services that sync files from your phone / laptop to the cloud.

[DPHOR]

I don't know actually if he updated his trust wallet. I had there was a hack on trustwallet from this who updated their wallet on that particular time, I could be wrong as I can't actually get the information correctly or to where I might have comes across such information in the forum here or from their site.
There were people who complained same thing about their funds missing from their trustwallet, this is to say that you shouldn't trust such wallet anymore and couples that it is not open source code wallet, that's why it's advisable to always use and Open source code wallet to store your funds such as electrum wallet or hardware wallet that is more trustworthy.

[7juju]

The gut he has to keep storing funds on a crypto wallet that he can't remember where he kept the recovery seed is the most irresponsible thing sentence I've read online this year. I hope this teaches someone a lesson about how important it is to keep recovery seed very safe first before storing funds on the crypto wallet.

Since he can't remember were he kept the seed phrase, it is very likely that someone has found it and made good use of it. Common sense should have made him realise that since he can't account for the seed phrase, he should move the funds to another wallet. Three things likely happened here that led to his coins being stolen. Either he saved his seed phrase online, or someone found it were he kept it offline, or he connected his wallet to a malicious website. Coins can't just move without any of the above happening.

[CryptSafe]

Most at times what we might be thinking is the problem or the cause of the hack or theft of assets might really not be the case, it might be something else entirely and far from where our thoughts might be. There are various ways hacker's can get access to devices. Maybe OP might have downloaded an app or something that could have granted the hackers access to OPs device and there the are able to do their dirty job of stealing OP assets. Sometimes the little things we ignore might likely be where the problem is.

[sunsilk]

I used to receive fake microsoft update and sign ins and that might be the culprit on that situation of the victim.

He's too curious and probably went on a panic upon seeing that and clicked the phishing link that's attached on that email.

And then, boom. That's how he's got phished when he willingly input the details about his wallet.

[nakamura12]

If the owner didn't save the seed phrase somewhere or inputted the seed phrase in a pishing site then it's more likely that the device was compromised like the owner downloaded a malware that's why the wallet is compromised and the funds were stolen. It's also possible that the seed phrase might have been leaked since as you can read on the screenshot that the owner said he didn't remember where he put his seed phrase then it could be that he might have saved it on a cloud.

[Furball808]

Is really all that the information? OP could have kept some things hidden maybe due to embarrassment but it is possible he engaged with the token sent to him or he did not realize that he downloaded something or signed his account to a sketchy website. It also seems like he is using a centralized exchange which are prone to scams like this one.

[OsaiEmma]

Audience, please tell me what you see..

Chances are, he actually saved his seed phrase in his email, due to the unusual sign in activity notifications, someone must have been able to access his email and gotten a hold of his seed phrase.

I myself have experienced something similar when I started exploring crypto newly, but it wasn't that they got a hold of my seed phrase, I accepted and signed a smart contract with my working wallet and before I knew it, vuala, my coins are gone, I learned a hard lesson and I never clicked or signed in any suspicious stuff in my wallet again, it was dreadful, so my first thought were he signed a smart contract that gave a third party access to his wallet, but seeing the unusual activities on his email, maybe that's where the issue is coming from.

[knowngunman]

Are you aware that trust wallet had an issue recently but looking at the screenshot, it shows a different date, the trust wallet compromises happen during the Dec 25 2025 and I don't seem to know how your wallet was hijacked to this extent, if it's not your relatives, it should be hackers or whoever someone having the confidence to take his funds away.

I'm baffled that we are acting surprise how this incident happened but the victim explicitly mentioned that he did receive a message from Microsoft notifying him of unusual login in his account but he ignored. It's very obvious here, someone has access to his email where he probably keeps sensitive files including his back up keys. Let leave hackers out of this issue. If you mishandle your seed phrase, you're making it easier for hackers instead of doing their job to stress their brain on how to do the hacking. There's a case of two security breach here, first is the Microsoft account compromised and the second is the wallet compromise. I believe the second one could be prevented if action was taken when the first one happened.

[Mpamaegbu]

Audience, please tell me what you see..

I'm looking at the whole thing as a hypothetical situation since what we've there is a mere post on Reddit. It's not that cases like that don't happen. They do. For the sake of analysis, I'm going to assume this particular one happened.

Here's what I think happened. That victim's passphrase was compromised. We know how criminals/hackers drop dusts on some wallet apps. Trust Wallet is notoriously guilty as one of such wallets. Once a Trust wallet is activated through purchase of any token, dusts from nonexisting tokens are sent to that address. Those who are greedy rush to claim or swap such tokens. That's where that compromise, most times happen. I find that in all my Trust wallets. Best way to treat such is to ignore them or disable such tokens. I don't try to swap what I didn't buy.

[RealNoblee]

Since he mentioned getting email messages from Microsoft about unusual sign in behavior probably on his account, there is the possibility that he uploaded the wallet seed phrase or private key to his Microsoft account and may have forgotten, remember he clearly said he can no longer remember where he kept the seed phrase to the wallet, so this is obviously a case of absolute carelessness here..

The user is absolutely irresponsible and I don't want to say he deserves losing this fund as a lesson but it's indeed looking like it, we know that thing about life being a brutal teacher to those who refuse to learn from other people's mistake..

Some may want to say that trust wallet can no longer be trusted and that there is a possibility that the loss of fund came directly from the wallet, but i honestly don't think this is the case, he stored his seed or private key online on his Microsoft account, and since the account was hacked, the hacker gained access to the seed or keys of the wallet and stole the funds.

Obviously, his actions where not a careful one. Storing a secret code on a device or am app like the kimd of seed phrase is not a good practice at all because all devices and apps are vulnerable to hackers who go about seeking for whom to devour.

But also on the contrary, not only the seed phrase stored on an app the is vulnerable, both the once written down in a book van be carelessly kept and are accessed by another.

Furthermore, every of our storage wallets must be diligently scrutinized before engaging with them. So many wallets out there looks genuine but they are created by hackers in order to have access to your secret codes.

[goldkingcoiner]

It is impossible to tell who the scammer is and almost as difficult to figure out how the scam occured. With only a screenshot of a transaction history, we cannot really know anything.

Either the device or the seed was compromised. Perhaps both. Maybe it was a friend who knew where the seed is... There is much that can be speculated.

P.s. Don't use Trustwallet. They are untrustworthy and do not care about their user's funds.

[Outhue]

This makes me remember coinnomi wallet, it was my first in this crypto space, coinnomi and free wallet, I lost alot of Bitcoin and Dogecoin because I was a newbie, today I can't even recover what I have lost because it's alot. Millions in Dogecoin and over 0.4 BTC or more, it's been long and I can't remember the precise number.

I was using coinnomi for many Airdrops and my mistake was keeping some coins on the wallet, I never knew the dangers that lurks when clicking on links, it was months after months later that my coins was stolen, I guess this must have been the case with what happened to OP, he must have used his Trust wallet to sign some nasty transactions.

Free wallet did me wrong, I was unable to recover all my coins because it was a custodial wallet, they changed something in their systems and users can't log into their old wallet anymore, it's like the derivation just got changed we all that's left is new empty addresses but with same old log in details, I will never forget these painful experiences as a beginner in crypto space.

[Big Dirams]

It is impossible to tell who the scammer is and almost as difficult to figure out how the scam occured. With only a screenshot of a transaction history, we cannot really know anything.

Either the device or the seed was compromised. Perhaps both. Maybe it was a friend who knew where the seed is... There is much that can be speculated.

P.s. Don't use Trustwallet. They are untrustworthy and do not care about their user's funds.

What you said is definitely possible. It just to complicated to even tell who the scammer is here because the details didn’t leave enough information about what truly occur despite the OP upload the images but it doesn’t still give much information though but we did understand that some token was send out to another address.
 I don’t see any reason for some users that avoid trusting their friends or family tiers with some personal information like this because the world is so cruel and anything could happen and at the same time any one could break one trust and do them dirty so we need to be very careful and security conscious when it comes to some personal information like this.

Let just be careful out there and know who to trust and always set boundaries for personal stuffs. And for many new users out there uploading our seed phrase into the net is not really a good idea so pls let avoid it and store our seeds phrase offline for security reasons.

[Pmalek]

Who knows what the person did. It could be a number of things. He obviously doesn't take all this seriously. If he doesn't know where his backup seed is, do you think he is careful with the software he downloads & installs, the permissions he gives in his wallets, the things he signs blindly, the links he clicks on, etc., etc.

Trust Wallet is notoriously bad and untrustworthy. If you pair that with someone who doesn't know what they are doing or doesn't stop to think before acting, then you got a recipe for disaster.   

[Ndabagi01]

~

Free wallet did me wrong, I was unable to recover all my coins because it was a custodial wallet, they changed something in their systems and users can't log into their old wallet anymore, it's like the derivation just got changed we all that's left is new empty addresses but with same old log in details, I will never forget these painful experiences as a beginner in crypto space.

A lot of people have really faced setbacks in their investments in their early days in the crypto space, but I think all of that has only made them better in the space and know how to better navigate the space and make better decisions that makes them avoid mistakes that costs them their coins. Looking back at all this only make one want to actually reflect back at their mistakes, losses they incur that time and how they’ve improved their engagement in the space into not making the same mistake over again.

[ROCterm]

Here’s what I think might have happened to the victim:

Their Microsoft account was compromised and somehow the attacker must have accessed the seed.. But the only possibility to get access is if the victim actually saved seed  unencrypted through any medium that can be accessed by just signing into Microsoft account . Else ,  Trust wallet has a  “backup to Google Drive” method which is always encrypted . That can’t be accessed easily either without getting access to Google account. So it’s either the first, victim couldn’t remember engaging with some unusual activity or the victim is just  bluffing.

https://www.reddit.com/r/trustwalletcommunity/comments/1rdz7gv/stealing_crypto_right_in_front_of_my_screen

Trust wallet is close-sourced and can’t be fully trusted.

Trust wallet backup to googel drive is stupidity, are they saying that its impossible for Google Drive to get hacked some day? That's not impossible.

Instead of risking this at all its still better to keep recovery seed away from everything that has to do with the internet and online, Trust wallet shouldn't have made this possible.

I hope newbies are smart enough to understand the difference in trusting offline rather than cloud backups that are always online.