Trust Wallet Cryptocurrency Scam Alert: MHA Issues Advisory

Post Views: 5

Trust Wallet Users Targeted by Sophisticated Crypto Scams

In a recent advisory issued by the Indian government’s nodal cybercrime agency, users of the popular non-custodial digital asset application Trust Wallet have been warned about a surge in sophisticated wallet drainer scams.

Sophisticated Scams Utilizing Fake Verification Sites and Telegram Lures

These scams utilize fake cryptocurrency verification sites and Telegram lures to trick users into granting malicious smart contract permissions, allowing attackers to drain funds from the wallets without any further interaction or approval.

According to the Indian Cyber Crime Coordination Centre (ICCC), “Once a victim grants permission, the scammer can automatically transfer funds from the wallet without any additional confirmation.”

Scammers Establish Contact through P2P Trading Platforms like Binance

The scams typically begin with a scammer establishing contact with the victim on a peer-to-peer trading platform such as Binance. The scammer then rapidly migrates the conversation to Telegram to evade platform-level monitoring.

Fake Verification Steps Create Sense of Urgency

The victim is informed that a mandatory cryptocurrency verification step is required to proceed with a transaction, creating a sense of urgency and compliance.

Malicious Smart Contract Permissions Grant Unrestricted Access

Victims are subsequently redirected to counterfeit websites impersonating legitimate blockchain verification services. When a user connects their Trust Wallet to these fraudulent pages, malicious smart contract permissions are silently approved, giving the attacker unrestricted access to the wallet’s contents.

Unauthorized Transactions Irreversible Due to Lack of Central Authority Governance

The financial consequences of these scams are severe, as unauthorized transactions on public blockchain networks are often irreversible due to the lack of central authority governance.

Protect Yourself from Trust Wallet Drainer Scams

Disconnect all decentralized applications (dApps) from your Trust Wallet settings
Avoid sharing seed phrases under any circumstances
Be aware of a built-in safeguard within the Trust Wallet application called the Critical Risk Alert, which triggers when you attempt to connect to flagged domains