Beware of Crypto Phishing: Spot Scammers and Protect Your Trezor

How to Protect Your Cryptocurrency from Fraud

This is no longer the current version of this article.
Read the new blog here: https://trezor.io/blog/security/this-is-the-way-most-crypto-is-stolen

we have never seen Phishing scams soar Across the crypto space, some are specifically targeting Trezor users.

Some of these scams are shockingly convincing. They impersonate exchanges, Trezor Support, other hardware wallet brands, and even Trezor team members!

Given the nature of self-governance (you have full control), we believe it is important to be fully aware and informed about these threats and how to keep your cryptocurrency safe.

Here’s what we’re seeing:­

• A fake email with a subject like: “AI wallet update”, “security incident”, or “Critical vulnerability”
• Scam phone calls pretending to be Trezor support and other brands
• Counterfeit Trezor devices listed on certain retail sites
• Phishing ad pretending to be Trezor
• Fake Trezor apps and scam websites
• Fake social media profiles impersonating our team

What is the most common pattern?­

Phishing emails are often sent from legitimate email platforms.

They use seemingly trustworthy domains on compromised or misused accounts.

It looks real.
But that’s not the case.

Whatever you do, remember this:

This means that you should not enter your wallet backup manually on your computer or phone. Not required for security updates.

This only happens if your Trezor is lost or corrupted, you are checking a backup, or you are setting up a new backup. These situations are extremely rare..

Most people have not used wallet backups after setting up a hardware wallet, and this is very normal.

Recovering a wallet is not a common occurrence, so if someone asks you to recover it, you should immediately arouse suspicion.

*For the original Trezor Model One, you manually enter your wallet backup, but when you restore your wallet, this is only possible when your device is connected to the Trezor Suite. Your device will ask you what word you should enter and what location you should enter.*

Scammers often try to make things seem harmless. “Recovery Key”, “Backup Code”or “password”.

They may disguise it as: “Bug fix”, “log in”or “security check”.

It’s still a wallet backup.

And you should never share it. always.

This also applies to anyone asking for your password, 2FA code or personal information. These are all clear red flags for a scam.

Do you feel rushed or pressured? Step back.

Scammers use fear, panic, and urgency to cloud your judgment.

If you’re hungry or have received a cryptocurrency-related message asking you to act quickly:

• If it’s a phone call, hang up.
• If you’re a DM, ignore it.
• If it’s an email, close the tab.

Even experienced users fall for these scams, and most victims immediately realize something is wrong. ~ after Share the keys to your cryptocurrency.

Take a breath. Think about it. Please check information about your conditions.

If your wallet backup is safe, secure, and offline, feel confident that your cryptocurrencies are in your control.

Our official emails are sent from: noreply@trezor.ioand our actual site domain is: @trezor.io.

Scammers often use similar domain names, but verifying the address makes it easier to filter them out.

Even so, always remain alert.

Never share sensitive cryptocurrency information with anyone, no matter how legitimate it may seem. Even if the domain looks official.

Trezor Suite can only be downloaded from the official site, which happens very rarely. You can usually download it once when you set up your Trezor, but you can also download it a second time when you get a new computer.

Here’s what we’re doing to combat these scams:

• Working with anti-phishing service providers fish port Removing phishing sites took an average of 48.79 hours per takedown over the past six months.
• Report fraudulent domains used in attacks
• Submit legal escalation to retailers with fake product listings
• Report phishing ads to our account team for takedown
• Updating Treasure Suite and trezor.io With phishing notification

We take this matter very seriously and will continue to fight against these scams.

Thank you for protecting your cryptocurrency with Trezor.

Take control.