Phishing via Google Ads: Trezor user loses crypto savings due to fake website
Fraudulent schemes in the crypto industry continue to evolve, and the latest incident involving the Trezor hardware wallet is a clear confirmation of this. A user under the nickname David reported on social network X the loss of all his savings after clicking on an advertising link in Google search results. For the query "Trezor wallet," a fake page hosted on the Google Sites platform appeared in the first position, where the victim was asked to enter the wallet's seed phrase.
Scale of the attack and suspicious wallet
During the analysis, I noticed an address that, according to the victim, was used to collect the stolen funds. Approximately 24 BTC were received to it—more than $1.6 million at the current exchange rate—distributed across 80 transactions. However, it is important to emphasize: the direct connection of this wallet to the fake site and the exact amount of David's personal losses have not been independently confirmed. In such cases, there is always a risk of both inflated figures and an incomplete picture, but the very fact of a large flow of funds to a suspicious address raises serious concerns.
Trezor's response and lessons for users
Trezor representatives promptly responded to the incident, stating that they are working to have the fraudulent page removed from search results. They also reminded users of a key security rule: the wallet backup—the seed phrase itself—must never be entered on any website, form, or application. Legitimate services never request this data, and any such demand is a one hundred percent sign of phishing.
Special attention should be paid to the fact that advertising listings in search engines are not a guarantee of authenticity. Attackers actively use Google Ads to promote malicious links, disguising themselves as official resources. This is a systemic problem that affects not only Trezor but also other popular crypto services.
My professional advice: always check the domain manually, use browser bookmarks for critical services, and ignore advertising blocks in search. Hardware wallets remain a reliable tool, but their protection is useless if the user themselves hands over the keys to scammers. This case is yet another reminder that in cryptocurrencies, the main risk is not the technology but the human factor.