CZ warns of Trust Wallet lookalike trastwallet.cam that prompts wallet connections and scans balances
CZ warns of Trust Wallet lookalike trastwallet.cam that prompts wallet connections and scans balances. Crypto Briefing reports no confirmed losses tied to the site.
- First reported
- Reports
- 1
Source: abijita.com · published
What happened
On 5 November 2026 Abijita reported that Binance co-founder Changpeng Zhao (CZ) warned cryptocurrency users about trastwallet.cam, a lookalike of Trust Wallet's real site trustwallet.com. Security researcher Anurag described how the site's JavaScript targets Trust Wallet, Phantom and OKX wallets and prompts visitors to connect a wallet, supposedly to review transfers, while scanning balances. Date note: the site was first identified by a researcher on 4 November 2026 and Crypto Briefing's report is dated 4 November; the Abijita article and CZ's warning are dated 5 November. Crypto Briefing reports no confirmed losses tied to the site.
How the scam works
According to Crypto Briefing's 4 November report, the impostor domain swaps the u in trust for an a and uses the .cam top-level domain instead of .com. Visitors are prompted to connect a wallet so they can review transfers. The code relies on a backend API to scan the connected wallet's balances and then prepares transfers to fixed recipient addresses controlled by the operators. At the time researchers checked the site, transaction signing was disabled, so the prepared transfers could not complete without a later change.
Connecting a wallet is not the same as sharing a seed phrase, but approving a malicious transaction afterwards can still empty balances. Trust Wallet's legitimate domain is trustwallet.com; users should open it by typing the address or using the official app, never through a search ad or a message link. Anyone who connected a wallet to trastwallet.cam should disconnect, review recent approvals, move funds to a fresh wallet if they may have approved anything, and never enter a seed phrase on a website. These findings come from Abijita, CZ's warning and Crypto Briefing; scammers.com has summarised them and not independently verified the site's code.
Source
Abijita, CZ Warns of Fake Trust Wallet Website in Phishing Scam, 5 November 2026; Crypto Briefing, Trust Wallet users warned of phishing site trastwallet.cam, 4 November 2026. Not independently verified by scammers.com.
Red flags
- A Trust Wallet lookalike domain such as trastwallet.cam instead of trustwallet.com.
- A prompt to connect a wallet to review transfers.
- Support for Trust Wallet, Phantom and OKX connections on an unofficial site.
- Any request to enter a seed phrase or approve an unexpected transfer.
- Links or ads that land on a .cam domain for a brand that uses .com.
If you were targeted
- 1Open Trust Wallet only by typing trustwallet.com or using the official app.
- 2Do not connect a wallet to trastwallet.cam or any lookalike.
- 3Never enter a seed phrase on a website.
- 4If you connected or approved anything, move funds to a new wallet and revoke approvals.
- 5Report the domain to Trust Wallet and your national cyber reporting service.