Disclosure: This post was written with AI assistance from my own documented experience. I am the affected user.I use a Trezor Model T and am documenting unauthorized Bitcoin transactions discovered on 15 October 2026. A Google Search sponsored result displayed
www.trezor.io and “Trezor Suite App (Official)”, but clicking ultimately reached a Trezor impersonation page hosted on Google Sites. I retained screenshots and a screen recording of that route.
My main concern is the ad itself: the official-looking domain shown by Google was what made me trust it, while the effective destination was a different site. I have asked Google to investigate the ad review and redirects, preserve records and explain that mismatch. I am not claiming a proven hardware breach or a legal finding against Google or Trezor; the technical cause remains under investigation.
The destination I documented, defanged — do not visit:
sites[.]google[.]com/view/web-trezor-suite
There is an earlier public report here:
https://bitcointalk.org/index.php?topic=5590655.0That is a separate report; I have not established the same attacker, advertiser or campaign.
Did you personally encounter a similar ad? I am seeking independent firsthand reports, including from people who spotted it without losing funds. Replies here are welcome. For private reports, the dedicated contact is
crypto.adscam.reports@proton.me. An alias, approximate date, wallet brand/model and a short account in your own words are enough. Redacted ad screenshots and destination details may help. No loss amount is needed.
The aim is to build a factual record for qualified lawyers to assess possible joint action and help prevent further harm. This is an independent affected-user initiative, not official support, a law firm or a recovery service. There are no fees or recovery promises. Never send recovery words, keys, passwords or codes. No wallet connections, signatures or payments will be requested. Please say whether you consent to private review and an email follow-up; separate permission will be requested before sharing reports with third parties.
