Trezor warns users of phishing emails costing millions in crypto scams

Hardware wallet manufacturer Trezor has issued a warning about a phishing campaign targeting its users through fake customer support emails.

According to a statement on Trezor’s official X account, attackers exploited the company’s contact form to submit fraudulent requests, which triggered automated replies that appeared to come from legitimate Trezor support.

The company emphasised that it “will never ask for your wallet backup” and urged users to keep such information private and offline at all times.

Trezor confirmed that its internal systems were not breached and that the phishing campaign did not involve unauthorised access to its email database.

The company stated that its contact form remains secure and that the phishing issue has been contained.

Phishing remains one of the most persistent threats in the cryptocurrency sector, often targeting individuals with substantial crypto holdings.

Mehdi Farooq, an investment partner at Hypersphere, recently reported losing a significant portion of his life savings in a spearphishing incident.

In another case from late May, one victim lost $2.6 million in stablecoins in two separate phishing attacks within a three-hour window.

Such incidents reflect the broader risk posed by sophisticated phishing campaigns aimed at exploiting trust in well-known crypto platforms.

Both platforms have since implemented enhanced security protocols to guard against similar breaches.

Trezor’s latest alert underscores the need for ongoing caution among crypto users, especially when engaging with support teams.

The company advised users to verify all communication channels and remain sceptical of any request involving private keys or recovery phrases.