Key Takeaways
- Trust Wallet’s security personnel have verified that a website advertising a cryptocurrency payment card is fraudulent and has no association with their platform.
- The fraudulent platform advertised a $100,000 transaction limit, cashback rewards reaching 8%, elimination of KYC requirements, and card activation for only $1.
- Cybersecurity analyst Daniel, identified as @0xDani on X, exposed the counterfeit platform on October 28.
- The fraudulent operation demanded that users link their cryptocurrency wallets, a tactic that enables dangerous transaction permissions.
- Trust Wallet emphasized that users should exclusively use its verified application and official website.
Trust Wallet has issued an alert regarding a counterfeit platform that falsely offers a crypto payment card bearing its identity. Security officials from the company have verified the website holds no legitimate connection to Trust Wallet.
Cybersecurity analyst Daniel, operating under the handle @0xDani on X, discovered and reported the fraudulent website on October 28. The platform misappropriated Trust Wallet’s official logo and visual identity to market the phony card product.
The deceptive site claimed users could spend cryptocurrency at any merchant location. Featured benefits included compatibility with Apple Pay and Google Pay, elimination of currency conversion charges, and removal of identity verification procedures.
Counterfeit Card Promised High-Value Benefits for Minimal Cost
Images circulated by Daniel revealed three membership levels designated as Lite, Signature, and Metal. All three displayed the Trust Wallet branding and corporate logo.
The Lite membership level advertised cashback rewards reaching 3%. The Signature tier promoted cashback up to 5%, waived foreign transaction fees, and expedited customer assistance.
The premium Metal category boasted 8% cashback benefits, unrestricted airport lounge entry, and 24-hour concierge assistance. The platform additionally highlighted a $100,000 transaction capacity and a mere $1 activation charge.
The fraudulent site asserted it possessed regulatory licenses across four jurisdictions. It further stated that customers would bypass Know Your Customer verification protocols, commonly abbreviated as KYC.
Acquiring the card required users to authorize their cryptocurrency wallets. Daniel pinpointed this authorization phase as the critical threat within the scam.
Trust Wallet Refutes Any Association with the Platform
James Bro, representing Trust Wallet’s security division, responded to Daniel’s alert on X. He verified the platform has no affiliation whatsoever with the company.
He clarified that authentic Trust Wallet services are exclusively accessible through its verified mobile application and official web presence. He cautioned users against authorizing wallet connections or approving questionable transaction requests for card acquisition.
The security announcements contained no reports of verified financial losses or compromised wallet identifiers. No information was disclosed regarding the operators behind the fraudulent platform.
Fraudsters have previously exploited Trust Wallet’s reputation. In June 2024, the organization alerted users about counterfeit versions of its application distributed through Xiaomi and Amazon app marketplaces and requested their takedown.
Simply connecting a wallet to an external website does not automatically grant that platform the ability to transfer funds. Nevertheless, malicious actors can exploit subsequent transaction authorizations or digital signatures to obtain spending authority over specific tokens.
These authorizations can enable an attacker’s smart contract to relocate digital assets without requiring the victim to disclose their recovery phrase. In July, an Ethereum account holder allegedly forfeited nearly $1 million following approval of a malicious transaction.
Prior to that incident, another individual allegedly lost approximately $1.65 million. That victim connected to a counterfeit exchange platform and authorized a malicious smart contract.
Earlier this month, blockchain security organization Salus traced unauthorized USDG withdrawals to permit signatures. The firm determined these authorizations granted attackers unlimited token spending privileges, enabling fund transfers without accessing victims’ private keys.
Trust Wallet’s security division is steering users toward its official application and verified website for legitimate card offerings. Users receive guidance to reject wallet authorization requests or signature approvals originating from unverified platforms.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
