Cybersecurity & IT Blog

TLDR

• This phishing website is named trustswallets (dot) exchange.
• Never enter your private key or any other informations tied to your wallet on it.
• Submitting a ticket to get help with your TrustWallet wallet from the official site is the safest way to get help.
• I lost more than$1000 because this phishing website and I don’t want anyone to fall for it.

If you come across this website or something similar, you are likely on a phishing website that pretends to be the official Trust Wallet site. Notice the extra “s” at the end of TRUST & WALLET, this gives a hint that is fake. The official Trust Wallet site has no extra “s” at the end of either word.

Unfortunately, I didn’t learn that until I got scammed. I lost more than $1000 and I wouldn’t like anyone to be victimized by this website or any similar sites. So I decided to make this blog post to make you aware and let you know how it happened.

Missing Crypto and funds in Trust Wallet

Being knowledgeable in cryptocurrency and blockchain technology is an important key for anyone trading cryptos. I failed to learn how Trust Wallet works and that made me vulnerable when I had an issue with my wallet.

It all started when I noticed that a crypto I held, UniMex UMX was missing its tokens and Dollar value. I first thought it was just a glitch and it would be back if I refreshed my wallet. But the tokens seem to not showing in my wallet so I panicked believing my was hacked somehow.

Check your crypto assets on their blockchain explorer if you don’t see them in your wallet.

Before this incident, I had no idea how Trust Wallet works. If I had knew it, I would likely not fell for this scumbag hacker.

I later learned that you can check for your crypto assets directly on their blockchain explorer like on this image below.

If you run through similar issue, check the explorer to see if your assets are safe. Trust Wallet don’t keep any assets in the app. It’s a tool to access your address on the blockchain, make transaction, and monitor your assets.

Because I didn’t know this before, I naively went on Trust Wallet official Twitter looking for help to find out where my crypto asset was.

I interacted with a non obvious fake Twitter account that replied to my tweet which turned out to be a bait that led me on their phishing website.

@TRUST-CRYPTO SUPPORT DESK

The hacker/s twitter account looks so legit that I failed to notice that I was not chatting with a Trust Wallet agent.

• The fake account have a descent amount of followers
• The fake accounts retweeted mostly any tweet from the official Trust Wallet account
• The fake account had never directly tweeted for that account.

This fake account might not exist anymore but keep in mind to remember any similarities with other malicious Twitter accounts. There are no shortage of those fake accounts on Twitter. Below are similar fake account I was able to find on Twitter.

The Phishing website I got hacked on.

Hackers would use many tricks to make their phishing website look similar to the official website they are faking.

Knowing more about the official address for any cryptocurrency App or website is vital in this industry. Hackers will usually create a fake domain with a little detail hard to notice.

We tend to not pay too much attention when in distress, in the hurry or looking for something impatiently.

I will suggest you to learn more about whatever wallet or website you are using in advance before running into an issue and look for it.

As you can see below, this phishing website domain has extra “s” at the end of TRUST & WALLET. The official Trust Wallet website has no extra “s” in his domain.

The safest way to get help from Trust Wallet

Trust Wallet has an official community website where you could learn more about the app and fill out a ticket if your issue need to be resolve by a Trust Wallet employee.

Trust Wallet official Twitter account is bad way to try to get help with your wallet as many hackers just wait for their target on there. I still didn’t get any reply to my post from any Trust Wallet employee since I posted.

I feel like it’s a little irresponsible for them to not reply to users who are looking for help and could likely be answered by a hacker instead.

The best way to protect ourselves is to be knowledgeable enough to know when someone is saying things that are not true.

I hope this blog post will help you be aware of some ways hackers use to find their potential victims. Stay aware and guck luck!!🙂