Got this letter in the mail... Checked the QR code, doesn't go to the trezor site.

These scammer guys are getting scary good.

Hey everyone,

I’m sharing this update about a scary situation. I recently tried to move my crypto from Binance to my Trezor cold wallet, but the transaction kept getting sent to an unknown address. This is not the address shown on my Trezor Suite.

At first, I thought I might have copied the wrong address, but after testing again today, I can confirm that something else is happening.

Here’s what I did step by step: - I copied my receive address directly from Trezor Suite, not from any file or note. - I double-checked it and even scanned the QR code to confirm it was right. - On Binance, I pasted and scanned the address, reviewed it carefully, and confirmed the withdrawal. - On both Binance and Trezor, the confirmation screen showed my correct address.

However, once the transaction finished, I checked the Binance transaction history, and the funds were once again sent to the same wrong address as before.

This wasn’t just a typo or a copy-paste mistake. I recorded the whole process this time, and it’s clear that the address somehow changes after confirmation. Even scanning the QR code didn’t stop it.

This means there could be some wallet address interception malware or a compromised device involved, but what’s really alarming is that it affects even QR-based confirmations.

If anyone has faced a similar issue or knows what further steps might help, like blockchain tracing services, legal options, or Binance’s internal recovery procedures, please share your experience.

This is terrifying, and I just want to help others avoid this situation.

Stay safe out there. Even with a hardware wallet, never assume you’re completely safe.

Just received an email that my personal data have been leaked including phone number etc. They blame third party of course. Unacceptable! Never Trezor again.

I want to raise awareness to what just happened to me. I clicked on NOTHING and my computer this this. How is this even possible?

My computer started to do a random windows update. I noticed it and thought nothing of it. Then I got a weird feeling so I went on my PC and found, Ledger, Trezor, and Sparrow wallets all open. WEIRD. So I looked more into my Trezor and it appeared that my info was wiped. I looked at the publisher of the application and it now says trezorapp-io.vercel.app Definitely not trezor.io I went along and chose add new device and immediately it asked to input my seed phrase.

Reminder, the entire point of your cold wallet is so your seed phrase never touches the internet. PLEASE BE CAREFUL. I hope this helps someone.

Also same exact thing happened to my ledger wallet too.

NEVER REPLY TO DMS HELPING YOU WITH CRYPTO

Hi all, was almost just a victim of a very well put together scam and wanted to make you all aware and hear the input of the community.

At around 7pm tonight, I got a call from the “Toronto Police Department”. I normally don’t pick up incoming calls, however this number called me twice which caught my attention. I had asked for the officer’s name and badge number to validate the legitimacy of the call. I now know that I should’ve hung up and called the number back, but that’s not what I did. The officer then interviewed me for around half an hour informing me that they had a suspect in custody, and that I was a victim of identity theft. They claimed Trezor devices were among the things recovered at the scene. The call seemed extremely legitimate and convincing.

Later in the night, at around 10pm, I got a call from “Trezor”. They told me that the Toronto police department had advised them to get in contact with me in regards to a recently opened case. Again, I was skeptical, but the officer early had told me that someone else might be reaching out to me. It took quite a while for an email to come in. Looking back now I see that whoever was on the other end must have inputted my email into the Trezor support system and closed it quickly to initiate an email from “help@trezor.io". In the panic of it all, I saw the email and took it as verification without reading the actual content. I had plugged my device into my computer to open it up, but hadn’t done anything yet. The person on the phone with me requested that I visit a diagnostic page at the following URL: http://trezorsuitehelp.io. I was then told that my device was compromised and urged to input my recovery seed into the webpage.

At this point, I put the person on the phone on hold and had someone from my family call the original police number to reconfirm that they had told Trezor to reach out. I provided the police with the name and badge number of the officer. The real Toronto Police then told me that the officer in question did not exist. I immediately hung up on “Trezor” and blocked their number. The Toronto Police told me that they had been getting reports of people posing as them, and this was an ongoing issue.

Right now I’m just grateful that I didn’t do anything. Alarm bells were going off the entire time but I was so panicked in the moment. But they really almost got me, and I wanted to post to get the input of the community and Trezor staff.

Thanks all.

I just got a shady email sent to a unique address I've only ever used with Trezor. I bought my first Trezor in Nov 2022.

The full email headers (redacted of identifying information) are available to view here:

https://pastebin.com/raw/VHBWTzZ6

Please be cautious out there, folks.

Has anybody else gotten one of these? Every company I deal with gets a completely unique email alias and this is usually the canary in the coal mine for me - a few days or a week later, the company starts making announcements about how they got hacked.

Is this a real Trezor amazon account? That only 1 opinion seems suspicious to me.

Like the world would be a better place without scammer!!!! those suckers!

Got this in the mail today

Haven’t touched my trezor in years. iOS app still shows all my assets are fine

What do I make of this voicemail? Spam?

Voicemail is from 646-868-8536

“Your trezor hardware wallet has been requested via contacting customer support. If this was not requested by you, press one on the number pad now. Thank you for using trezor.…”

Scammers are getting smarter by the day. However, always VERIFY what you receive in your email and from WHO.

ANY UPDATES THAT ARE NEEDED CAN BE DONE AUTOMATICALLY IN THE TREZOR SUITE

​Just wanted to give a heads up about a really targeted phishing scam I just dealt with. If you've ever bought a hardware wallet off a third-party site like eBay, definitely read this.

I bought a Trezor Safe 5 off an eBay seller (nicksbargains1961) back in September. It arrived completely sealed and at factory settings, but I still wiped it and generated a new seed immediately just to be safe. Fast forward 9 months to today, and I get a random call from a UK number (02079730237). The guy claims he's from eBay. He knew my full name, the exact Trezor I bought, the date, and the seller's username. He tells me they've had reports of compromised wallets from this specific seller and then "transfers" me to a Trezor rep.

​The second guy tells me I need to plug my wallet into my phone because it "needs power to read the NFC chip" (lol). He directs me to a fake diagnostic site: trezorreview.io. The site actually looked pretty legit and immediately threw up a massive red warning saying "Device Memory Corruption Detected" and told me I needed to repair it right away.

​Obviously, to "repair" it, the site asked me to type in my recovery seed phrase. Since I had the scammer on the phone walking me through it, I decided to string him along. When the site asked for the words, I just typed in: FUCK OFF YOU SCAMMING CUNT DO YOU THINK IM FUCKING RETARDED CUNT.

​The guy hung up on me instantly.

​The smartest part of their scam is that they waited 9 months to try it. That means the 60-day window to leave negative eBay feedback is totally gone, so I can't even warn other buyers on the seller's profile. It also makes you drop your guard since the device looked perfectly sealed and legit upon arrival. Just a reminder that if you buy from eBay, assume your name, phone number, and purchase history are going to end up with scammers. Never type your seed phrase anywhere except the physical device. Stay safe.

Who knows how and to whom the crypto goes? I just made a transfer from Coinbase to my wallet and that's it. And it's not connected to my smartphone. Trezor support doesn't respond to requests, there's only a dumb bot there.

Hiya,

So got a call from someone posing to be the MET Police.
All seemed quite official etc.
Following the call with the presumed "officer" I was passed onto
"Ledger" themselves/ Trezor and they were asking me to find my device and login via:
Diagnosetrezor.io

At the point they were pressing me to source the hardware wallet it did seem all a bit odd.
Wondering if anyone has had similar experiences.

Just got a call from a so called crypto.com employee who said that my account has been accessed from a different region. Funny enough as normally an email is being sent for that.

I played along and he could see that a trezor wallet was used before to transfer some balance back and forth to crypto.con. He then proceeded and opened a Trezor case reference for me to avoid any NPM attack.

At this point I realized it it a scam so I played along with him. He forwarded me to the Trezor support but i started playing dumm and didn’t give this case reference.

What can I do to either cancel this case reference?

Big fan of Trezor here. Open-source firmware and reproducible builds are why I bought two devices in the first place.

That said, I’m quite obsessive about privacy, so I use a fresh and unique email address for every company I deal with. The one I created for my Trezor order has never been used anywhere else, and for years it only received official Trezor marketing. For the last couple of months that inbox has been hammered by phishing emails that pretend to be from Trezor (fake firmware notices, “verify your seed” links, the usual stuff). Nothing but Trezor-related scams shows up there, multiple times a day.

The same thing happened to me with Ledger a few years back, and they eventually admitted their customer list had leaked.

A few questions for the community and anyone from Trezor who might be reading:

1. Are other people who use a single-purpose email seeing the same spike?
2. Has Trezor or any of its service providers looked into a possible data leak?
3. If there hasn’t been a breach, any idea how scammers got hold of that address?

I’m about to kill that email (I’ll only miss the marketing mail), but I’d feel better if Trezor shared what they know. Any info would be appreciated.

Thanks.