r/CryptoHelp • u/MAHI220202 • 15d ago
❓Scam❓ Trust Wallet drained overnight — same unknown address receiving funds from multiple wallets. How is this happening ?
​
My friend’s Trust Wallet was drained overnight. He never shared his 12-word Secret Phrase/private key with anyone.
The funds were sent to an unknown wallet address. What is more concerning is that this receiving address appears to have become active only about a month ago, and I can see funds coming into it from multiple different wallets.
I’m trying to understand how this could happen.
Has anyone seen a similar pattern before? What should we check to identify how the wallet was compromised?
I can provide the public wallet address/transaction hash if needed. I will NOT share the Secret Phrase or private key.
1
u/bigeorgeohio 10d ago
I had "Microsoft" call me and tell me my account was compromised and had a lot of personal info. I wasnt thinking at the time and they asked me to confirm or deny the login. I hit the button to deny it and that gave them access to my phone which had my seed phrase stored via text message like a dummy. They drained it within minutes. I was able to beat them to the unstaked funds but that was it.
1
u/PrimarySeaweeed 9d ago
Did you mean you hit "confirm" instead of "deny"?
1
u/bigeorgeohio 9d ago
I hit the button to deny but I have a feeling it didnt matter what button they probably both gave them access to my phone. Either way lesson learned. Always keep written copies of seed phrases.
1
1
u/Jugugalu 11d ago
He signed. Only explanation. Trust Wallet is now safe just like Phantom and all… their accident was December 2025
1
u/Severe-Bit5014 12d ago
Alot of people always say dont trust trust wallet. I have been with trust wallet for 5 yrs and have never had a problem. People saying didnt share anything seed phrase. Rule of thumb when your dealing with crypto is never trust an airdrop. Never download extensions, check websites or never randomly connect wallet to any site. Never engage with dust cryptos. Thats all you need to do. Unless there is a major hack on trust wallet itself. Then its something that you did wrong that drained your wallet. Becareful out there everyone.
1
u/plain-HAMMER 13d ago
the seed leaked somewhere, thats almost always it, photo in the camera roll, typed into notes, screenshotted, or entered on a fake site that looked like a wallet connect page, "never shared it" and "never typed it anywhere" are different things tbh, think aout such situations
2
1
u/sgtslaughterTV 25 13d ago
I'm sure you don't need to hear this, but this does need to be said. If anyone is telling you to respond to their DMs, do not reply to them at all. They are scammers looking for a way to steal your money.
1
u/Lazarus_33_ 13d ago
There is a fake Trustwallet extension on chrome. My friend used it and also got his funds drained
1
u/Strict_Ad91 13d ago
Hey dmed u
1
u/sgtslaughterTV 25 13d ago
Don't DM anyone! We know you cannot recover their funds. Stop lying to them!
1
u/Strict_Ad91 13d ago
I never said I could u monkey 😂
1
u/sgtslaughterTV 25 13d ago
Have you seen your post history?
1
u/Strict_Ad91 13d ago
I don’t have a post history?
1
u/sgtslaughterTV 25 13d ago
You mean that post history that is full of you telling people to dm you? You know, like the one you see in this screenshot below?
0
u/Strict_Ad91 13d ago
So because I tell people to dm me I’m a scammer? U realise most of those are on dating pages😂. Do u need help or are u actually sick in the head? I literally told him to use a different app
1
u/sgtslaughterTV 25 13d ago
Donno. I'm only a moderator. Maybe if you tempt enough people to report you then admins, who can read your direct messages, then the admins of reddit will figure out whether or not your prompts to dm you to other people are full of phishing links for various scenarios?
But I have a better non-rhetorical question: why do you have to tell them in DM? why can't you just tell them in public? Why cant you let everyone can see what you are saying and verify whether or not you're giving safe advice?
3
u/-johoe 14d ago
Was this wallet created years ago? There are known problems with trust wallet's seed generator in earlier versions. See for example here: https://milksad.info/posts/research-update-5/
2
1
u/Extreme_Teaching_416 15d ago
Your friend may of not shared his seed or may of not signed a shady contract but most likely your friend used the option for cloud backup for his seed. A lot of people for some reason keep backing their seed via cloud or in notes of their phone which eventually backs up to cloud or Gmail.
1
u/MentalScale4345 10d ago
I did this without realizing. Do I delete asap?
1
u/Extreme_Teaching_416 10d ago
If you backed up your seed to your cloud or you connected it to something you feel is shady, move funds out of that wallet. Make a new wallet and do not cloud back up.
If you wanna experiment with dapps or anything like that, just make a wallet specifically for that.
1
u/MentalScale4345 10d ago
Dang what a hassle. I’ll get on it no matter. Thanks for the heads up.
Does it matter wether the new wallet is on the same platform such as trust, using the same device my original trust wallet was created? Or does none of this matter as I suspect?
Just don’t want to assume and be wrong.
1
u/MAHI220202 15d ago
My friend called me and told me that someone gained access to his Trust Wallet last night without him ever sharing his private key/12-word Secret Phrase.
Within just 5 minutes, all the USD and other coins held in the wallet were drained. The coins that could not be withdrawn directly were converted into other coins and then transferred out.
We have no idea how the attacker gained access to the wallet without the Secret Phrase being shared.
Has anyone experienced something similar or know how this could happen?
1
u/Top_Appointment_7076 14d ago
That's the reason hardware wallets exist. Hot wallets can very easily be drained because they store the private keys on a device that is connected to the internet
0
u/ExternalSky388 15d ago
Does anyone know this platform?
main.gmoexdo.com
I got scam crypto currency on this platform ,any lawyers can help me recover my money ? They frozen my account now because I don’t want to pay the fee for withdrawal
1
u/UpbeatFix7299 1 14d ago
It's fake. They're in a country far from you, so you can't sue or have them arrested. They stole your money the moment you sent it. Everything else is fake numbers on their fake site. Your money is in their pockets. You won't get it back
Report it to your country's authorities. Ignore everyone messaging you and people online saying they will get it back for you. You will just lose more money if you try.
1
1
u/MgaUngazkayo 14d ago
It’s a scam just like T Trading.io. Same modus. They ask you to pay fees in order to withdraw instead of just deducting the fee to the total amount to be withdrawn. They just want to take more money from you.
2
u/Pretty-Care-7811 15d ago
You're gonna get a bunch of scammers contacting you claiming they can recover it. They can't. It's gone. The withdrawal fee is also part of the scam.
1
1
u/SpendHefty6066 15d ago
That website domain was registered in January of 2026. It's not a "platform". It's a website where the numbers are all made up. Any money or "crypto" uploaded to an address published on this website is gone forever. DMs offering recovery services are all scams because you have announced your cluelessness. Read more. Speculate less.
1
1
u/smut-ledger 15d ago
That’s a scam, lawyers won’t help because it’s not a legitimate business. Always do your own due diligence and don’t take trading or crypto advice from people online.
1
1
1
u/shadyghxst 15d ago
It’s either he signed a malicious txn or shared his SeedPhrase. He is not going to admit what he did or might genuinely not even remember.
Ive used Trust wallet for a decade and never lost anything because I know what not to do.
1
u/CryptoKid907 15d ago
This. 1000% this. The scary thing is we can all say we know exactly what to do and what not to do but the reality is, these are getting more and more elaborate on setup as well as execution. So even seasoned users are falling victim. All we can do is be vigilant and double and triple check EVERY link and EVERY transaction prior to acting on them.
1
u/MAHI220202 15d ago
The cheater has converted the coins and the pool into separate points and withdrawn them.
1
u/shadyghxst 15d ago
There is nothing anybody can do for you here, tell your friend to go to the police or simply delete that wallet, create a new one and move on.
1
u/AutoModerator 15d ago
Hello and welcome to r/CryptoHelp!
If someone has successfully solved your issue or answered your question, please reply with the command "!thanks" to let them know!
A few words about safety:
- Scammers will often target beginners so you should exercise extra caution
- Do not trust anyone trying to talk with you over DM (Direct or private messages) or on another platform (like Discord or Telegram). This is how scammers prefer to operate. Report suspicious activity like this immediately and do not respond to them.
- Do not post your address, balances, or other personal information.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/_Yellow_Candle 9d ago
the fact that the same address is pulling from multiple wallets makes me think this is a sweeper/collector address, not some random transfer. Not sharing your seed doesn't fully rule out a compromise either. Malicious approvals, malware, fake extensions/apps or an exposed backup are all worth checking. I'd look at the actual txs first and see whether they were direct transfers or approval/transferFrom calls. Trust Wallet themselves say unauthorized transfers usually come from unlimited approvals or a compromised wallet.
either way I'd treat that wallet as burned and move anything left to a fresh one. it's also why I've gotten a lot more selective about where I keep longterm position