A phishing attack via Google Ads: a Trezor user lost significant funds.
Another victim of a fraudulent scheme in the cryptocurrency space has shared their story, shedding light on the growing threat of phishing through search engine advertisements. A user under the alias David reported on social network X that he lost his savings after clicking on an ad link in Google search results for "Trezor wallet." Instead of the official hardware wallet website, he landed on a fake page hosted on the Google Sites platform, where scammers requested his seed phrase.
According to the victim, the address he provided, presumably used by the attackers to collect stolen funds, received about 24 BTC (exceeding $1.6 million at the current exchange rate) across more than 80 transactions. However, it is important to emphasize that the direct connection of this wallet to the fake site, as well as the exact amount of David's personal losses, has not been independently confirmed at this time. Nevertheless, the very existence of such a scheme raises serious concerns within the community.
Trezor, one of the leading hardware wallet manufacturers, responded promptly to the incident. Company representatives stated that they are already taking steps to remove the fraudulent page from search results. In their official statement, they once again reminded users of a critically important security rule: the wallet backup (seed phrase) should never be entered on any websites or forms, regardless of how official they may look. Trezor also emphasized that search engine advertisements should not be considered a verified or reliable source.
This case highlights a systemic issue: even major platforms like Google are not always able to effectively filter malicious content in their advertising networks. Scammers actively exploit users' trust in search results by disguising themselves as official services. For crypto investors, this serves as a stark reminder of the need to always manually verify URLs, use bookmarks, and enable two-factor authentication.
My analysis: This incident is just the tip of the iceberg. Such phishing attacks are becoming increasingly sophisticated, and even experienced users are falling victim. I strongly recommend that anyone storing significant amounts of cryptocurrency use hardware wallets with caution and never enter their seed phrase in digital form—this is a golden rule that could save your assets. The industry must more actively implement educational initiatives, and search engines should tighten moderation of advertisements in the cryptocurrency niche.