Silent Crypto Wallet Drain Targeting Trust Wallet Users

Silent Crypto Wallet Drain Targeting Trust Wallet Users

A phishing campaign is hitting Trust Wallet users through QR codes shared on Telegram. People are being tricked into giving permanent spending permission on their USDT so attackers can empty the wallet later without asking again.

The scam does not hack the wallet. It relies on deception. A QR code is shown as a normal Trust Wallet transfer. When scanned it opens a fake page that looks like a real “Send USDT” screen. The user thinks they are approving a small transfer. What they are actually signing is an approval that lets an attacker-controlled contract move their tokens at any time.

How Most People Find Out

Many only notice after the money is already gone. Some spot an “unlimited” approval sitting in their Trust Wallet settings. Others discover the balance has disappeared when they try to send funds normally.

Because the approval stays active until it is revoked by hand, both the current balance and any future USDT can be taken.

The campaign has been seen operating mainly on BNB Smart Chain, where fees are low enough for attackers to repeat the process easily.

Why the Scam Works So Well

The fake pages are built to look almost exactly like real Trust Wallet screens. Familiar buttons, success messages, and network prompts make the whole process feel ordinary. A lot of victims never realize the transaction they signed was an approval instead of a transfer.

If Your Wallet Has Already Been Emptied

Once an unlimited approval is in place, the attacker can move funds whenever they want. Acting quickly is important. The usual first steps are to revoke any suspicious token approvals, move whatever is left to a fresh wallet that never touched the malicious page, and keep records of every transaction hash and address involved.

Getting money back is rarely straightforward. Blockchain transfers are permanent. Success depends on how fast the approval is cut off, whether any funds can still be traced or frozen, and what records exist of the phishing interaction.

We help people who have lost cryptocurrency through phishing, approval scams, and similar tricks. If you think your Trust Wallet or another wallet was hit this way, use the contact form on our site and request a conversation.

Bring any transaction hashes, screenshots of the approval, or notes about the QR code or Telegram message you dealt with. We will look at what shows up on-chain and talk through the recovery options that are still realistic.