Google ad displayed trezor.io, led to fake Sites: firsthand reports sought

[CryptoAdScamReports]

Disclosure: This post was written with AI assistance from my own documented experience. I am the affected user.

I use a Trezor Model T and am documenting unauthorized Bitcoin transactions discovered on 15 October 2026. A Google Search sponsored result displayed www.trezor.io and “Trezor Suite App (Official)”, but clicking ultimately reached a Trezor impersonation page hosted on Google Sites. I retained screenshots and a screen recording of that route.

My main concern is the ad itself: the official-looking domain shown by Google was what made me trust it, while the effective destination was a different site. I have asked Google to investigate the ad review and redirects, preserve records and explain that mismatch. I am not claiming a proven hardware breach or a legal finding against Google or Trezor; the technical cause remains under investigation.

The destination I documented, defanged — do not visit:

Code:

sites[.]google[.]com/view/web-trezor-suite

There is an earlier public report here:
https://bitcointalk.org/index.php?topic=5590655.0
That is a separate report; I have not established the same attacker, advertiser or campaign.

Did you personally encounter a similar ad? I am seeking independent firsthand reports, including from people who spotted it without losing funds. Replies here are welcome. For private reports, the dedicated contact is crypto.adscam.reports@proton.me. An alias, approximate date, wallet brand/model and a short account in your own words are enough. Redacted ad screenshots and destination details may help. No loss amount is needed.

The aim is to build a factual record for qualified lawyers to assess possible joint action and help prevent further harm. This is an independent affected-user initiative, not official support, a law firm or a recovery service. There are no fees or recovery promises. Never send recovery words, keys, passwords or codes. No wallet connections, signatures or payments will be requested. Please say whether you consent to private review and an email follow-up; separate permission will be requested before sharing reports with third parties.

[Lakai01]

Did you personally encounter a similar ad? I am seeking independent firsthand reports, including from people who spotted it without losing funds. Replies here are welcome. For private reports, the dedicated contact is crypto.adscam.reports@proton.me. An alias, approximate date, wallet brand/model and a short account in your own words are enough. Redacted ad screenshots and destination details may help. No loss amount is needed.

This might not be 100% on topic, but I’m writing it anyway because you simply can’t say it often enough: Use an ad blocker when you visit sites like Google.com—or just use a browser like Brave, which has ad blocking built in.

Brave also consistently blocks Google ads, so you’re never tempted to click on a misleading link in a Google ad.

The fact that Google allows this to happen at all—and lets ads for products run even though the product doesn’t belong to the company advertising it—is, of course, a whole other issue and, in my opinion, should be stopped.

[hugeblack]

Are you looking for scam ads related to Trezor or any Google ads linked to scams and phishing sites? There are hundreds of them, and these scammers don’t limit themselves to targeting just one specific service. Given that Google lacks a clear policy against such advertisements, I’m not sure what good it would do to report them to you.

Brave also consistently blocks Google ads, so you’re never tempted to click on a misleading link in a Google ad.

uBlock works perfectly.