COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/Bitcoin: Trezor user loses life savings to a fake Google-sponsored Trezor website

reddit-fake-trezor-google-ad

https://www.reddit.com/r/Bitcoin/comments/1vi2jv0/trezor_user_loses_life_savings_by_entering_their/

Latest reviewed change

source content difference between and

The thread gained comments about trusting Coinbase, buying a new hardware wallet, search-engine phishing, and a reported 160k loss.

seen +40 -10 full history below
 body:
 I used RBF since the transaction was still unconfirmed when I caught it.
 
-comment: p2aitav
-parent: t1_p2a96u3
-author: Todo_es
-created_utc: 1786119540
-edited: false

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
9
Detected differences
9
Unreviewed
0
Copies held
10

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +40 -10

    The thread gained comments about trusting Coinbase, buying a new hardware wallet, search-engine phishing, and a reported 160k loss.

    seen · Captured here 58,367 chars
    What changed from the previous capture 50 lines
     body:
     I used RBF since the transaction was still unconfirmed when I caught it.
     
    -comment: p2aitav
    -parent: t1_p2a96u3
    -author: Todo_es
    -created_utc: 1786119540
    -edited: false
    -body:
    -Not true. Self custody is safe as long as you are able to keep your private key safe, which is not difficult if you follow some very basic safety rules.
    -
    -Once I tested the freedom and power of sovereignty over my money, I will never go back to give it away to central powers.
    -
     comment: p2aiywn
     parent: t3_1vi2jv0
     author: sing2nite
     edited: false
     body:
     I agree that they should be liable. Same with Youtube and all of those fake Elon Musk scam videos. However, Section 230 immunity has protected them for the most part. I don't agree with this, particularly with advertising, as even the most basic of screening would prevent this, but most of the laws were designed and lobbied for by big corporations to protect themselves, so it doesn't surprise me.
    +
    +comment: p2s4wel
    +parent: t3_1vi2jv0
    +author: EmuFlaky2922
    +created_utc: 1786339699
    +edited: false
    +body:
    +Still ok w Coinbase here. No one is perfect but they’re more perfect than me when it goes to protecting shit. I just know Coinbase will never call me cuz realistically their support is awful 🤣 but that’s usually the scam
    +
    +comment: p2t16au
    +parent: t1_p2l2x6z
    +author: Own-Veterinarian4611
    +created_utc: 1786355901
    +edited: false
    +body:
    +Buy a new one, and enter it only into the new hardware wallet, never ever anywhere else.
    +
    +comment: p2xl8we
    +parent: t1_p2af7ag
    +author: trufin2038
    +created_utc: 1786403278
    +edited: false
    +body:
    +There is no case for that horrible design
    +
    +comment: p2xlfnk
    +parent: t1_p2ahu2k
    +author: trufin2038
    +created_utc: 1786403335
    +edited: false
    +body:
    +Scams are a dime a dozen. I'm disappointed in people who trust search engine and websites and enter their root mnemonic into anything that asks for it.
    +
    +comment: p350kdl
    +parent: t3_1vi2jv0
    +author: No-Reading-4384
    +created_utc: 1786491121
    +edited: false
    +body:
    +I got clipped for 160k. Sucks!!!
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +28 -0

    The thread gained comments about scams targeting Bitcoin users, a seed-typing rule for cold-wallet beginners, and platform liability for scam advertising.

    seen · Captured here 57,685 chars
    What changed from the previous capture 28 lines
     body:
     Yah I scroll past the sponsored links now and never click on them.  They are full of scams. 
     
    +comment: p2leu1s
    +parent: t1_p2cn99x
    +author: blueshoesrcool
    +created_utc: 1786253487
    +edited: false
    +body:
    +Including btc itself
    +
     comment: p2llcxh
     parent: t3_1vi2jv0
     author: racingmonster1234
     edited: false
     body:
     😂😂
    +
    +comment: p2o2tja
    +parent: t3_1vi2jv0
    +author: corporate-citizen
    +created_utc: 1786291962
    +edited: false
    +body:
    +Cardinal rule for cold wallet newbies. It’s simpler than the four rules of gun safety:
    +
    +# 1. Never type your seed phrase onto any keyboard, EVER.
    +
    +2. See no. 1.
    +
    +comment: p2ok7uw
    +parent: t1_p2ag6hq
    +author: abitofcoinOTC
    +created_utc: 1786296838
    +edited: false
    +body:
    +I agree that they should be liable. Same with Youtube and all of those fake Elon Musk scam videos. However, Section 230 immunity has protected them for the most part. I don't agree with this, particularly with advertising, as even the most basic of screening would prevent this, but most of the laws were designed and lobbied for by big corporations to protect themselves, so it doesn't surprise me.
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +28 -4

    One existing comment was deleted and the thread gained three new comments about sponsored-link scams, near-misses, and reactions.

    seen · Captured here 56,789 chars
    What changed from the previous capture 32 lines
     
     comment: p2bqhvh
     parent: t1_p2b88vc
    -author: jesusrambo
    +author: [deleted]
     created_utc: 1786130798
    -edited: false
    -body:
    -This is called GofundMe lol
    +edited: 1786256684
    +body:
    +[deleted]
     
     comment: p2bsskv
     parent: t1_p2aleaq
     edited: false
     body:
     But what if you lose the hardware wallet itself? 
    +
    +comment: p2l7knr
    +parent: t1_p2a3zmh
    +author: Time_after_Time_67
    +created_utc: 1786250163
    +edited: false
    +body:
    +Yah I scroll past the sponsored links now and never click on them.  They are full of scams. 
    +
    +comment: p2llcxh
    +parent: t3_1vi2jv0
    +author: racingmonster1234
    +created_utc: 1786256633
    +edited: false
    +body:
    +Almost did that myself 
    +
    +comment: p2m0a3u
    +parent: t3_1vi2jv0
    +author: GiveMeSomeOfThatWow
    +created_utc: 1786264111
    +edited: false
    +body:
    +😂😂
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. source content difference between and source content +64 -0

    The thread gained several new comments about scam ads on YouTube and Bing, hardware wallet loss, and why victims enter seeds into websites.

    seen · Captured here 56,357 chars
    What changed from the previous capture 64 lines
     edited: false
     body:
     Rule #0 don't put life savings in any crypto facility
    +
    +comment: p2jzzjs
    +parent: t1_p29yiko
    +author: ChironXII
    +created_utc: 1786233633
    +edited: false
    +body:
    +Hmm, but then again some people lose all their money and conclude only that they need to get more to lose 
    +
    +comment: p2k3idw
    +parent: t1_p2aee0h
    +author: Big80sweens
    +created_utc: 1786234855
    +edited: false
    +body:
    +I won’t take as long if you keep buying bitcoin
    +
    +comment: p2k6ghn
    +parent: t1_p2ag6hq
    +author: CalvinsStuffedTiger
    +created_utc: 1786235902
    +edited: false
    +body:
    +Half of the YouTube ads I get are from fuckin scam companies 
    +
    +comment: p2kefbg
    +parent: t3_1vi2jv0
    +author: griswaldwaldwald
    +created_utc: 1786238762
    +edited: false
    +body:
    +Why would anyone ever enter their hardware seed into a website rather than into the device?
    +
    +comment: p2kffwi
    +parent: t3_1vi2jv0
    +author: BitcoinMD
    +created_utc: 1786239122
    +edited: false
    +body:
    +This is self custody
    +
    +comment: p2ki697
    +parent: t1_p2ag6hq
    +author: professional_burrito
    +created_utc: 1786240117
    +edited: false
    +body:
    +As of 6 months ago, if you search “vanilla visa gift card balance” on Bing, the first three results were all phishing pages. Not sure if they fixed it yet.
    +
    +comment: p2kj9l4
    +parent: t1_p2i7ls6
    +author: True-Lychee
    +created_utc: 1786240516
    +edited: false
    +body:
    +What are you talking about? People get their bank accounts drained by scams all the time.
    +
    +comment: p2l2x6z
    +parent: t1_p2i08cv
    +author: olivehue1
    +created_utc: 1786248177
    +edited: false
    +body:
    +But what if you lose the hardware wallet itself? 
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  5. source content difference between and source content +50 -8

    The thread gained several new participant comments and lost one empty or removed comment record.

    seen · Captured here 54,907 chars
    What changed from the previous capture 58 lines
     body:
     This is on Google , they have had this issue forever but as long as you pay for adds they will put it up without content checking for phishing
     
    -comment: p2boli1
    -parent: t3_1vi2jv0
    -author: Just_Bluebird_5268
    -created_utc: 1786130295
    -edited: false
    -body:
    -It's the future of money
    -
     comment: p2bqhvh
     parent: t1_p2b88vc
     author: jesusrambo
     This has been going on for years, I once very nearly got scammed when I googled for the Sirius XM contact number and the sponsored topresult was a scam number. 
     
     Google is absolutely complicit.
    +
    +comment: p2h2lcr
    +parent: t1_p2a7s3c
    +author: Souprshooter
    +created_utc: 1786202127
    +edited: false
    +body:
    +Take this tele tab my main bournos is waiting in Camelot
    +
    +comment: p2hf2ed
    +parent: t1_p2aee0h
    +author: Dmoan
    +created_utc: 1786205709
    +edited: false
    +body:
    +This is nothing new Google has refused to take steps to prevent spammers from exploiting it.
    +
    +I used to report these like the fake insurance companies masquering as real insurance companies popping up in adverts appearing in search results. Google would rarely take action.. 
    +
    +comment: p2hp1tr
    +parent: t1_p2cms7u
    +author: electromage
    +created_utc: 1786208558
    +edited: false
    +body:
    +2.5 BTC, A "sat" is 0.00000001 BTC.
    +
    +comment: p2i08cv
    +parent: t1_p2ey1we
    +author: True-Lychee
    +created_utc: 1786211689
    +edited: false
    +body:
    +Only into the hardware wallet itself. Never into Windows or any other operating system that could have a keylogger, compromised website or phishing site.
    +
    +comment: p2i7ls6
    +parent: t3_1vi2jv0
    +author: MiamiSkeet69
    +created_utc: 1786213772
    +edited: false
    +body:
    +Imagine fake banking apps and websites that drain your bank account, i will forever stay away from bitcoin it does nothing it was originally created for 
    +
    +comment: p2ijwwh
    +parent: t1_p29yr27
    +author: MPolanyi
    +created_utc: 1786217338
    +edited: false
    +body:
    +Rule #0 don't put life savings in any crypto facility
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  6. source content difference between and source content +78 -10

    A comment about Google's ability to detect malicious ad changes was removed, and new replies were added about PGP verification, Google's ad complicity, and Trezor's X response.

    seen · Captured here 53,710 chars
    What changed from the previous capture 88 lines
     body:
     lol wdym? ColdCard was chilled by everyone as the top best way for everyone to self custody. Don’t come acting like people who used it were wreckless or dumb or ill informed. Any other more complicated wallet is just out of reach for the average holder. For me SC just failed to democratize and get safe and easy enough after all those years. I tried it, but swapped it for ETF now (for ease of use and tax incentives) and I am so glad I did.
     
    -comment: p2ayy7o
    -parent: t1_p2aff1u
    -author: Peewee223
    -created_utc: 1786123667
    -edited: false
    -body:
    -Google runs one of the biggest web crawlers in the world.
    -
    -They could detect that an advertised site changed significantly and disable the ad until it's reviewed again.
    -
     comment: p2az52q
     parent: t1_p2ad13b
     author: Free-Way-9220
     edited: false
     body:
     I’m kinda new at this so please forgive my ignorance. How would one access their wallet if they lose their Trezor device? Don’t you essentially have to type your seed phrase into somewhere, like Trezor website or suite? 
    +
    +comment: p2fdhx5
    +parent: t1_p2bfpkm
    +author: ComaVN
    +created_utc: 1786178244
    +edited: false
    +body:
    +You really should check the pgp signature . Then it doesn't matter where you downloaded it from.
    +
    +comment: p2fj6fd
    +parent: t1_p2fdhx5
    +author: nycteris91
    +created_utc: 1786181213
    +edited: false
    +body:
    +I did as well.
    +
    +I don't trust anything. I miss when they published the hash on the website, which is the easiest to verify.
    +
    +It seems to be outdated.
    +
    +comment: p2fq014
    +parent: t1_p2az52q
    +author: Whole-Respond4782
    +created_utc: 1786184701
    +edited: false
    +body:
    +yeah they've shown countless times that they don't care at all sadly
    +
    +google wants that money, people paying for ads is how they get it, i'm sure its intentional that they're not very strict
    +
    +comment: p2frw8e
    +parent: t3_1vi2jv0
    +author: nyphoebe
    +created_utc: 1786185624
    +edited: false
    +body:
    +damn I need to learn how to scam
    +
    +comment: p2fvhlv
    +parent: t1_p2a3fwe
    +author: MannerismsBot8000
    +created_utc: 1786187285
    +edited: false
    +body:
    +Victims of crypto scams become unable to have children!? 
    +
    +comment: p2fvt9x
    +parent: t3_1vi2jv0
    +author: MigBuscles
    +created_utc: 1786187430
    +edited: false
    +body:
    +Scam website irl:
    +
    +Please enter your 🔑 
    +
    +…okay 
    +
    +🪙🪙🪙👻
    +
    +comment: p2gab0v
    +parent: t1_p2d0268
    +author: tenor_tymir
    +created_utc: 1786193204
    +edited: false
    +body:
    +They just said on X that they are going to in a reply to the victim. 
    +
    +comment: p2gyu1x
    +parent: t1_p2ag6hq
    +author: jesuswithoutabeard
    +created_utc: 1786201024
    +edited: false
    +body:
    +This has been going on for years, I once very nearly got scammed when I googled for the Sirius XM contact number and the sponsored topresult was a scam number. 
    +
    +Google is absolutely complicit.
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  7. source content difference between and source content +81 -3

    The original post was edited to add a possessive apostrophe in 'google's', and the thread gained several new participant comments about phishing, scams and hardware wallet recovery.

    seen · Captured here 52,309 chars
    What changed from the previous capture 84 lines
     parent: t1_p2buau0
     author: Free-Way-9220
     created_utc: 1786132451
    -edited: false
    -body:
    -For as long as google allows people to point their ads to sites \[dot\] google \[dot\] com, these scams will continue to breeze past google very weak filters.
    +edited: 1786163360
    +body:
    +For as long as google allows people to point their ads to sites \[dot\] google \[dot\] com, these scams will continue to breeze past google's very weak filters.
     
     comment: p2bxcso
     parent: t1_p29yiko
     edited: false
     body:
     To think this ever goes mainstream is an absolute joke.
    +
    +comment: p2e04fo
    +parent: t3_1vi2jv0
    +author: claytonbeaufield
    +created_utc: 1786156255
    +edited: false
    +body:
    +Why are crypto hodlers addicted to inputing their information into sketchy websites.
    +
    +comment: p2e2lui
    +parent: t1_p2bqhvh
    +author: Acolyte_of_Swole
    +created_utc: 1786157151
    +edited: false
    +body:
    +Basically this, or Patreon. The person can promise a reward or a product in exchange for the money but there's rarely any legal penalty if they disappear with the money and never produce anything.
    +
    +I could make a patreon or gofundme tomorrow that promises to give out a bunch of high quality scans of rare doujins or something, take the money for the project and just never do it.
    +
    +comment: p2e37pe
    +parent: t3_1vi2jv0
    +author: InvestigatorPlus3229
    +created_utc: 1786157375
    +edited: false
    +body:
    +skill issue
    +
    +comment: p2e3el1
    +parent: t1_p2d5nwh
    +author: Acolyte_of_Swole
    +created_utc: 1786157446
    +edited: false
    +body:
    +And we all hope for someone to be there to help us when there's a catastrophic event in our lives, which is exactly why people give their money to banks and other financial institutions. Or buy insurance.
    +
    +BTC is by definition barely regulated, not insured, with even the ownership unsure at times. It has no fixed price. No ceiling but also no floor. Its value is weighted purely in fiat conversion at this time. Outside of illegal purchases, there is little one can do with it if you live in a first-world country.
    +
    +The coldcard thing should have been a wake up call to many people. What makes the coldcard thieves "not the real owners"? Bitcoin is not subject to any oversight. When thieves rob a bank, the US Government gets involved because the US government is backing the Dollar. Is Satoshi gonna hire hitmen for me if I lose my BTC?
    +
    +comment: p2e5mj3
    +parent: t1_p29yr27
    +author: sturmeh
    +created_utc: 1786158280
    +edited: false
    +body:
    +Instructions unclear, this Trezor only has two buttons!
    +
    +comment: p2e752j
    +parent: t1_p2dltqj
    +author: larryogunjobi
    +created_utc: 1786158855
    +edited: false
    +body:
    +I had no idea what it was at the time either. I just saw that the transaction was still unconfirmed and just started trying everything I could to try to stop it.. ledger live showed an option to cancel it by paying a higher transaction fee (which I obviously didn’t have because my funds were actively being drained) so I sent $20 of btc from my coinbase account to my wallet and somehow caught it in time. It was insanely lucky 
    +
    +comment: p2eknii
    +parent: t3_1vi2jv0
    +author: versace_dinner
    +created_utc: 1786164238
    +edited: false
    +body:
    +brew install —cask trezor-suite
    +
    +comment: p2eueyq
    +parent: t3_1vi2jv0
    +author: freedomforallergo
    +created_utc: 1786168659
    +edited: false
    +body:
    +I don't think crypto will be mainstream until there's a dummy proof system. People are not used to having full control of their funds. One small mistake and it's all gone. 
    +
    +comment: p2ey1we
    +parent: t3_1vi2jv0
    +author: olivehue1
    +created_utc: 1786170418
    +edited: false
    +body:
    +I’m kinda new at this so please forgive my ignorance. How would one access their wallet if they lose their Trezor device? Don’t you essentially have to type your seed phrase into somewhere, like Trezor website or suite? 
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  8. source content difference between and source content +501 -40

    Two comments in an off-topic exchange were self-deleted, author and body now reading [deleted] and [removed], and a third reply to one of them is no longer served. The prior capture preserves all three.

    seen · Captured here 49,133 chars
    What changed from the previous capture 541 lines
     
     comment: p2a6tdk
     parent: t1_p29yiko
    -author: thetoucansk3l3tor
    +author: [deleted]
     created_utc: 1786116457
     edited: false
     body:
    -It's like my pastor always said, any holes the goal. 
    +[removed]
     
     comment: p2a6uzv
     parent: t1_p2a3zmh
     
     comment: p2a7gch
     parent: t1_p2a6tdk
    -author: dystopiam
    +author: [deleted]
     created_utc: 1786116620
     edited: false
     body:
    -Think the catholic priests really ran with that one
    +[removed]
     
     comment: p2a7h96
     parent: t1_p2a70kb
     
     [https://imgur.com/a/joxqSD0](https://imgur.com/a/joxqSD0)
     
    -comment: p2ag70l
    -parent: t1_p2a6tdk
    -author: Verditure0
    -created_utc: 1786118869
    -edited: false
    -body:
    -Damn we must have had the same pastor!
    -
     comment: p2ahu2k
     parent: t3_1vi2jv0
     author: Existing_Anybody_216
     body:
     There’s been a fake wasabi wallet in Apple Store for a while now
     
    -comment: p2ai8pa
    -parent: t1_p2a6tdk
    -author: spressa
    -created_utc: 1786119393
    -edited: false
    -body:
    -My pastor told me I was the holiest...
    -
     comment: p2aia7l
     parent: t1_p2a9ezy
     author: larryogunjobi
     
     comment: p2b6ak5
     parent: t1_p2a7gch
    -author: kingkongbiingbong
    +author: [deleted]
     created_utc: 1786125544
     edited: false
     body:
    -***:: screams in choir boy ::***
    +[removed]
     
     comment: p2b7ovm
     parent: t3_1vi2jv0
     body:
     lmao I love it, where do I invest \*ahem\* enter my seed phrase
     
    -comment: p2bf2sf
    -parent: t1_p2ae3kt
    -author: abbaziadicefalu
    -created_utc: 1786127805
    -edited: false
    -body:
    -Remember the YouTube giveaway scams on their homepage.
    -
    -Totally mind boggling they promoted that stuff.
    -
     comment: p2bfpkm
     parent: t1_p29yiko
     author: nycteris91
     body:
     It's the future of money
     
    -comment: p2bopvw
    -parent: t1_p2b6ak5
    -author: ZippyDan
    -created_utc: 1786130327
    -edited: false
    -body:
    -We're going to need you to remove yourself from that choir boy.
    -
     comment: p2bqhvh
     parent: t1_p2b88vc
     author: jesusrambo
     edited: false
     body:
     This is called GofundMe lol
    +
    +comment: p2bsskv
    +parent: t1_p2aleaq
    +author: arcrad
    +created_utc: 1786131411
    +edited: false
    +body:
    +Don't be Google 
    +
    +comment: p2buau0
    +parent: t1_p29yiko
    +author: 0x4157
    +created_utc: 1786131814
    +edited: false
    +body:
    +Well, it is a bit easier to get scammed if Google is freaking showing scam sites at the top of the search results.
    +
    +comment: p2buzb5
    +parent: t3_1vi2jv0
    +author: Top-Care-8946
    +created_utc: 1786131996
    +edited: false
    +body:
    +It's one of the most important rules: never download nothing directly from google-search found links. Users of any kind of device that needs a software to operate it's advised to go directly to the vendor/maker official site and there it's usually safe to download what's needed for the device to operate. For an example TV makers don't expose their operating software installers. You can google: LG TV webOS download and first what pops out  as search result is the support main page where  their customers can enter the exact model number and depending on the production date TV might have latest WebOS to download. I think that if all makers follow same policy then users can't be fooled by scammers and swindlers. Users are guided to visit official site and then can verify update availability. 
    +
    +I have Trezor. It's app (Trezor Suite) can be updated in app directly  (I have disabled automatic updates). So if an update is available I check version number and only if the version provided matches with officially announced version number then I will update. So no need to google for updates for such critical device like cold wallet. It's a security vulnerability that has been and will be exploited until there will be less people who trusts everything that they see  and are lazy enough not going to official site to be sure that their intentions to upgrade their devices is safe. 
    +
    +comment: p2bve9o
    +parent: t1_p2bsskv
    +author: Big-Finding2976
    +created_utc: 1786132107
    +edited: false
    +body:
    +If you Google evil it shows you a picture of Google.
    +
    +comment: p2bvpae
    +parent: t1_p29yiko
    +author: No_Job8951
    +created_utc: 1786132189
    +edited: false
    +body:
    +I lost about 20k before I learned my lesson and now have 2fa enabled for every site possible that involves cash.
    +
    +And in all honesty I am grateful that is all the money I lost as it could've been way worse.
    +
    +So you are exactly right
    +
    +comment: p2bwiuo
    +parent: t3_1vi2jv0
    +author: Impossible-Story-436
    +created_utc: 1786132410
    +edited: false
    +body:
    +Native advertising should be illegal. It’s straight-up deception - ads made to look like normal content, like search results or posts. I fucking hate that shit.
    +
    +comment: p2bwok5
    +parent: t1_p2buau0
    +author: Free-Way-9220
    +created_utc: 1786132451
    +edited: false
    +body:
    +For as long as google allows people to point their ads to sites \[dot\] google \[dot\] com, these scams will continue to breeze past google very weak filters.
    +
    +comment: p2bxcso
    +parent: t1_p29yiko
    +author: chinstrap
    +created_utc: 1786132631
    +edited: false
    +body:
    +I recently clicked way into a phishing email. I knew not to do every single thing that I did, but I did it all anyway.. Knowledge alone won't do: you have to PAY ATTENTION and slow down and think about what you are doing. People who have forgotten more about computer security than I know have done just what I did, which is to make an error when distracted and in a hurry.
    +
    +comment: p2bzj6u
    +parent: t1_p2ad45d
    +author: frog_tree
    +created_utc: 1786133220
    +edited: false
    +body:
    +yup. Once your crypto value become significant, its a lot less fun being your own bank. Doesnt make sense to have my 10 year old car insured, but not this usb stick worth more than my house.
    +
    +comment: p2c1qlw
    +parent: t1_p2bheun
    +author: RUYYRUYY
    +created_utc: 1786133820
    +edited: false
    +body:
    +>> Due diligence is an obligation of the publisher to ensure they're not publishing illegal or harmful content.
    +
    +This is completely not true. 
    +
    +*Last week, a federal court shut down Pinnacle Development Partners and froze its assets after the SEC accused the company of operating a nationwide Ponzi scheme, in which returns are paid with other investors' money. The WSJ did some of the heavy lifting in unearthing this sordid tale. Today, financial-fraud watchers are asking why Newsweek, the WSJ, and others accepted ads from Pinnacle, which raised money through "an extensive national advertising campaign" promoting its investment returns in some 40 publications, according to the SEC. Here's today's story from the WSJ. "The first sign that should put everyone on notice -- investors and newspapers -- is a promise of outlandish returns," says Kelly Bowers, an SEC lawyer. Pinnacle's ads promised returns of 25% in a little as 45 days. The SEC said Pinnacle's advertising itself was illegal, irrespective of any fraud, because Pinnacle hadn't registered with the agency to sell securities. According to the WSJ, publications typically review every ad they accept and flag for further review ones that are potentially libelous, illegal or offensive to readers. What are the legal issues? The WSJ reporter, Zachary Seward, asked a couple of media lawyers: Floyd Abrams, a well-known First Amendment lawyer at Cahill Gordon, says the law generally protects publications from liability for running fraudulent ads. "Society cannot ask, and the courts will not ask, of newspapers that they do the equivalent of investigative journalism to check out the bona fides of their advertisers," he says. Abrams added that publications are hesitant to vet their ads, or at least tell readers they do, because "if they fail to identify the fraudulent ad, they might be in more trouble than if they hadn't started down that road in the first place." Paul Davis, an FTC attorney, says his agency, which regulates business advertising, says obeying securities laws is left to the advertiser, not the publication. Davis tells the WSJ that the FTC has long debated whether action should be taken against publications that run deceptive or misleading ads. "And the answer was simply no," he says, because the ads are protected as free speech.*
    +
    +https://www.wsj.com/articles/BL-LB-2588
    +
    +comment: p2c2vx5
    +parent: t1_p2acqhj
    +author: imsoupercereal
    +created_utc: 1786134133
    +edited: false
    +body:
    +All of our ads are scams, at least we're up front about it - Bing
    +
    +comment: p2c424i
    +parent: t3_1vi2jv0
    +author: Yojik_Vkarmane
    +created_utc: 1786134450
    +edited: false
    +body:
    +He can sue Google and win. They basically got paid by the scammer to advertise his scam on top page. They are culprit. They allowed this.
    +
    +comment: p2c4gbt
    +parent: t1_p2a8889
    +author: Yojik_Vkarmane
    +created_utc: 1786134557
    +edited: false
    +body:
    +They took payment from the scammer.
    +
    +comment: p2c7w4d
    +parent: t3_1vi2jv0
    +author: Astropin
    +created_utc: 1786135492
    +edited: false
    +body:
    +So they gave it away....got it.
    +
    +comment: p2c89tj
    +parent: t1_p2biefp
    +author: DJBunnies
    +created_utc: 1786135595
    +edited: false
    +body:
    +Nah it's fraud.  With theft they have to actively take it from you.
    +
    +comment: p2c9l25
    +parent: t1_p2ag6hq
    +author: Worldx22
    +created_utc: 1786135954
    +edited: false
    +body:
    +Kloaking. Interesting subject. Fake ads hide behind legit ads. 
    +
    +comment: p2ca8nz
    +parent: t1_p2a70kb
    +author: oojacoboo
    +created_utc: 1786136135
    +edited: false
    +body:
    +It should be illegal to be able to advertise alongside someone else’s trademark.  We have competitors that buy ads on our trade name.  I get why, but if people are searching for a company, other companies should be able to outrank you for your own trade name.  Nevermind having to buy ads for your own trade name to ensure you’re properly listed.
    +
    +comment: p2cabnj
    +parent: t1_p2bluzq
    +author: Justsomedudeonthenet
    +created_utc: 1786136157
    +edited: false
    +body:
    +One big problem with Trezor is their entire mailing list got hacked awhile back so the bad guys have used that to make pretty well targetted phishing emails. It's at the point that when there is a genuine security issue with Trezor, I'll probably ignore any notice they send about it.
    +
    +comment: p2cd4fi
    +parent: t3_1vi2jv0
    +author: criptoabc
    +created_utc: 1786136949
    +edited: false
    +body:
    +Recently reported one and google answer me they dissappear.  They use to upload the ad just for a few hours so they doesn't find it. 
    +
    +comment: p2chcih
    +parent: t3_1vi2jv0
    +author: anndrrson
    +created_utc: 1786138172
    +edited: false
    +body:
    +To be fair, it wasn't the wallet that failed in this instance
    +
    +comment: p2cms7u
    +parent: t1_p2a3vlj
    +author: AnApexBread
    +created_utc: 1786139782
    +edited: false
    +body:
    +Jesus. Someone lost 2.5Sats
    +
    +
    +https://www.blockonomics.co/#/search?q=d6943da12fbdc83b8effefce10287de2fea4c39dacb861b1e259ca8ed0409087&addr=bc1qrz33mr7tx8wrpcs2pxrvv83hqwpm907s9shkz4
    +
    +comment: p2cn7sd
    +parent: t1_p2apzqi
    +author: AnApexBread
    +created_utc: 1786139912
    +edited: false
    +body:
    +The difference is that you can dispute charges and reverse wire transfers with traditional banks. 
    +
    +comment: p2cn99x
    +parent: t1_p2apzqi
    +author: Good_Roll
    +created_utc: 1786139925
    +edited: false
    +body:
    +Are we just going to pretend like most of the crypto space isnt scams and rugpulls?
    +
    +comment: p2cngfp
    +parent: t1_p2b7ovm
    +author: Good_Roll
    +created_utc: 1786139986
    +edited: false
    +body:
    +You have lost the plot
    +
    +comment: p2cu81i
    +parent: t1_p2a7s3c
    +author: Amb042
    +created_utc: 1786142085
    +edited: false
    +body:
    +Classic
    +
    +comment: p2cvscx
    +parent: t1_p29yiko
    +author: restore_democracy
    +created_utc: 1786142580
    +edited: false
    +body:
    +Fool me once, shame on you. Fool me twice, you won’t get fooled again.
    +
    +comment: p2cw03k
    +parent: t3_1vi2jv0
    +author: restore_democracy
    +created_utc: 1786142648
    +edited: false
    +body:
    +If you want to be your own bank, you’d better be a good banker.
    +
    +comment: p2d0268
    +parent: t1_p2ag6hq
    +author: OldWolf3
    +created_utc: 1786143948
    +edited: false
    +body:
    +Why isn't Trezor doing a takedown request?
    +
    +comment: p2d0924
    +parent: t3_1vi2jv0
    +author: boy_tue
    +created_utc: 1786144010
    +edited: false
    +body:
    +🤣
    +
    +comment: p2d2cdk
    +parent: t1_p2c89tj
    +author: TheCurlyHomeCook
    +created_utc: 1786144691
    +edited: false
    +body:
    +God this thread is annoying to read. Yes, you're right on technicalities, but you're also being insufferable. Being the classic reddit pedant is not a flex. 
    +
    +The person who did this made a mistake, and we can call it dumb. But not everyone who buys bitcoin has the knowledge or experience to get everything right every time. They could be a senior or young person.
    +
    +As bitcoiners surely we should be hoping for more awareness, and less risk for the mainstream rather than victim blaming proudly because you're so much smarter than them. 
    +
    +People losing money is awful, and people stealing money through fraud, violence or viruses are awful. Have some empathy and sense.
    +
    +comment: p2d31mg
    +parent: t1_p29xt55
    +author: Far_Cartographer3546
    +created_utc: 1786144919
    +edited: false
    +body:
    +Happens to the best. Some people just having bad day, stress and not thinking straight on that particular day
    +
    +comment: p2d3i2i
    +parent: t1_p2ad45d
    +author: OldWolf3
    +created_utc: 1786145070
    +edited: false
    +body:
    +More to the point, don't have all your eggs in one basket
    +
    +comment: p2d462l
    +parent: t1_p2bwok5
    +author: traFyssuP
    +created_utc: 1786145288
    +edited: false
    +body:
    +Seems like they’re maliciously negligent honestly.  I bet if you asked Gemini if the site was safe it’d say no pretty assuredly
    +
    +comment: p2d4mev
    +parent: t1_p29yiko
    +author: Gears6
    +created_utc: 1786145437
    +edited: false
    +body:
    +I always find it ironic that we want absolute control over our "crypto", but then it turns out, we're not as responsible with it as we think....
    +
    +I keep my crypto at Kraken. It's not my life savings, because there's no guarantee it is safe there. The very benefit of crypto is also it's largest crutch.
    +
    +comment: p2d4ssl
    +parent: t3_1vi2jv0
    +author: Linkyjinx
    +created_utc: 1786145495
    +edited: false
    +body:
    +Leave him he is ,a freak
    +
    +comment: p2d4wdf
    +parent: t1_p2d2cdk
    +author: DJBunnies
    +created_utc: 1786145527
    +edited: false
    +body:
    +Cool those jets, internet warrior.  
    +
    +
    +There's absolutely nothing wrong with pointing out what's true and what's not, even if what's true is acting dumb.  Because everybody acts dumb at some point(s) in their lives, what's important is how to learn from it and not make similar mistakes in the future.  To err is human and all.
    +
    +
    +Assuming this is even real and not some rage/cry bait, then yea it sucks to be them, quite an expensive lesson.  But like what do you expect a thread to discuss besides pointing out the obvious?
    +
    +
    +Because that's what these threads are, discussions on the lesson.  To call out what is true and what isn't, who is responsible for their shit and who isn't.  And even though the maybe-victim probably won't see this, others will and may even learn to avoid the same mistake.
    +
    +
    +Discussing these things candidly isn't un-empathetic, nor is it nonsensical.  Grow up.
    +
    +comment: p2d4x5x
    +parent: t1_p2a3vlj
    +author: Gears6
    +created_utc: 1786145534
    +edited: false
    +body:
    +Clearly I'm in the wrong "businezzz"....
    +
    +comment: p2d54ih
    +parent: t1_p2aee0h
    +author: Gears6
    +created_utc: 1786145599
    +edited: false
    +body:
    +First of all, don't work for 40-years to just make $1.5 million. That's working for peanuts. Aim higher and for things that is opposite of that.
    +
    +comment: p2d5nwh
    +parent: t1_p2b67i3
    +author: Gears6
    +created_utc: 1786145779
    +edited: false
    +body:
    +> Perfect example why crypto will never be mainstream. If you leave your wallet out, you should hope someone doesn't steal it in a civilized area.
    +
    +This is what people often don't get in crypto circles. They think control is the benefit, and to an extent it is, but it's also the downside. The government may print money and such, but they also have protection if some bank looses your money or some brokerage loses your stocks (up to a certain amount). Can't say that about crypto.
    +
    +We can sit here and say how stupid people are and so on, but it really just shows how narrow minded you are. You may know a lot about crypto, but do you know a lot about everything else?
    +
    +Real estate transactions? Loans? Legal issues? Building codes? Food safety?
    +
    +In other words, we all rely on the government to help us navigate the complexity of life.
    +
    +comment: p2dazco
    +parent: t1_p2acqhj
    +author: DrDerpberg
    +created_utc: 1786147548
    +edited: false
    +body:
    +Fuck you, you think you'll go use something else? - still Google
    +
    +comment: p2dbo3y
    +parent: t3_1vi2jv0
    +author: angelwolf71885
    +created_utc: 1786147781
    +edited: false
    +body:
    +Rule Number The First…NEVER Enter You’re Seed Phrase In Anything Other Then The Hardware Wallet Itself 
    +
    +comment: p2ddmm4
    +parent: t3_1vi2jv0
    +author: callfckingdispatch
    +created_utc: 1786148441
    +edited: false
    +body:
    +rip
    +
    +comment: p2dfydh
    +parent: t1_p29yiko
    +author: locotx
    +created_utc: 1786149243
    +edited: false
    +body:
    +Everyone pays their tuition in some way
    +
    +comment: p2dgei6
    +parent: t1_p2af7ag
    +author: locotx
    +created_utc: 1786149396
    +edited: false
    +body:
    +Until . . . 
    +
    +
    +
    +comment: p2dgi4l
    +parent: t3_1vi2jv0
    +author: locotx
    +created_utc: 1786149430
    +edited: false
    +body:
    +USER ERROR.  CLOSING TROUBLE TICKET.
    +
    +comment: p2dhlhi
    +parent: t3_1vi2jv0
    +author: jadequarter
    +created_utc: 1786149810
    +edited: false
    +body:
    +this is it this is the end this is
    +
    +comment: p2dl2c2
    +parent: t3_1vi2jv0
    +author: wickedplayer494
    +created_utc: 1786151001
    +edited: false
    +body:
    +Preventable with even a *little* bit of uBlock Origin, come on now.
    +
    +comment: p2dl63q
    +parent: t3_1vi2jv0
    +author: PersonalityAsleep524
    +created_utc: 1786151038
    +edited: false
    +body:
    +bUT crYPToCurREnCY IS tHe FUturE
    +
    +comment: p2dltqj
    +parent: t1_p2aia7l
    +author: QXPZ
    +created_utc: 1786151271
    +edited: false
    +body:
    +How do you know enough to know what RBF is but not know enough to enter your seed phrase someplace? 
    +
    +I had to look up what RBF is. If I made a mistake like that, I'm not sure I'd have the wherewithal to figure out how to RBF worked in the meantime.
    +
    +comment: p2dmw5x
    +parent: t3_1vi2jv0
    +author: 077
    +created_utc: 1786151642
    +edited: false
    +body:
    +hopefully people sue google for this. crypto is a low IQ hobby and people will get scammed daily but google clearly abided in illegal actives by promoting a scam site
    +
    +comment: p2dob4o
    +parent: t1_p29yiko
    +author: Notyit
    +created_utc: 1786152131
    +edited: false
    +body:
    +Def scammers on Reddit promoting scamy products just takss
    +
    +comment: p2dp6fr
    +parent: t1_p2axqyg
    +author: Objective_Digit
    +created_utc: 1786152431
    +edited: false
    +body:
    +> ColdCard was chilled by everyone as the top best way for everyone to self custody.
    +
    +Everyone? Most people recommended Trezor or the Ledger. ColdCard was aimed at more advanced users who should have had enough sense to use a passphrase or roll dice.
    +
    +Even some who did endorse the ColdCard recommended rolling dice years ago.
    +
    +https://blog.lopp.net/how-to-securely-create-a-bitcoin-seed-phrase/
    +
    +The most idiot proof way to self-custody is probably the BitKey. The coins are backed up on the device, your phone and a third party server (coins are unspendable in the last).
    +
    +comment: p2dpkmy
    +parent: t3_1vi2jv0
    +author: Ok-Mango5075
    +created_utc: 1786152569
    +edited: false
    +body:
    +Very early software wallets about 13 years ago relied on androids built in random number generator to make a seed. This generator was faulty as well. This was patched out in subsequent android releases. Not long afterwards hardware devices were brought onto the market. I never found a compelling reason to trust them.  I was a very active bitcoin user back then.  First with Multibit on PC and then I was searching for an android self custody wallet. The first one arrived called Mycelium. Now this seemed a more sensible combination. An audited self custody wallet running on a mass market Android cell phone. Where are the back doors? Well as time has now shown...Not many.
    +
    +comment: p2dqmhd
    +parent: t1_p2cabnj
    +author: corporate-citizen
    +created_utc: 1786152934
    +edited: false
    +body:
    +Ledger’s customer list as well. Twice.
    +
    +comment: p2dvbk4
    +parent: t3_1vi2jv0
    +author: Acsnook-007
    +created_utc: 1786154571
    +edited: false
    +body:
    +To think this ever goes mainstream is an absolute joke.
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  9. source content difference between and source content +401 -4

    The thread gained new comments about Google-sponsored scam ads, a reported scam-wallet address, and whether self-custody users were reckless, alongside author deletions of earlier comments.

    seen · Captured here 32,066 chars
    What changed from the previous capture 405 lines
     
     comment: p2a44q1
     parent: t3_1vi2jv0
    -author: username12435687
    +author: [deleted]
     created_utc: 1786115768
     edited: false
     body:
    -I like flooding these with random bs seed phrases from empty wallets just so they take them time to recover the wallet with nothing in it. 
    +[deleted]
     
     comment: p2a5f1h
     parent: t3_1vi2jv0
     
     comment: p2a8r3q
     parent: t1_p2a7s3c
    -author: Kirkoid
    +author: [deleted]
     created_utc: 1786116958
     edited: false
     body:
    -Cape trimming or pile of gold in the Wildy?
    +[removed]
     
     comment: p2a8uwb
     parent: t1_p2a8889
     edited: false
     body:
     I think a healthy thing to do is go through the recovery process once during setup. This way, that process is in your memory and you won’t enter in into software having never done it before. 
    +
    +comment: p2atw1l
    +parent: t3_1vi2jv0
    +author: InvestigatorPlus3229
    +created_utc: 1786122380
    +edited: false
    +body:
    +whats with people putting their entire life savings in one ledger
    +
    +comment: p2auh0v
    +parent: t1_p2a96u3
    +author: Objective_Digit
    +created_utc: 1786122531
    +edited: false
    +body:
    +> the death of sloppy self custody
    +
    +FTFY
    +
    +comment: p2aul4q
    +parent: t3_1vi2jv0
    +author: tnseltim
    +created_utc: 1786122559
    +edited: false
    +body:
    +Dang. In the last 3 days that wallet has received and transferred out 1.5 million.   
    +[wallet address](https://www.blockonomics.co/#/search?q=bc1qrz33mr7tx8wrpcs2pxrvv83hqwpm907s9shkz4) 
    +
    +comment: p2avllw
    +parent: t3_1vi2jv0
    +author: AreaFifty1
    +created_utc: 1786122817
    +edited: false
    +body:
    +what 5 bucks?
    +
    +comment: p2avxi8
    +parent: t1_p2a3zmh
    +author: cutoffs89
    +created_utc: 1786122901
    +edited: false
    +body:
    +Google doesn't care if they promote scams, scamers buy lots of ads. Shit is soo fucked.
    +
    +comment: p2aw5t6
    +parent: t1_p2a70kb
    +author: cutoffs89
    +created_utc: 1786122959
    +edited: false
    +body:
    +They make soooooooo much money off of scam ads and bs. They are not going to cut themselves off from it.  Shit is sooo fucked. 
    +
    +comment: p2awaj1
    +parent: t3_1vi2jv0
    +author: Gh0mri
    +created_utc: 1786122993
    +edited: false
    +body:
    +That is so crazy. Yesterday I wanted to check out Ledgers products and just typed Legder in the search bar i Chrome. I opened the first link.
    +
    +On the site I noticed some links not working, so I checked the URL, and it also showed site.google.com/ledger, and I looked on Google where it ranked first payed with Ad.
    +
    +This is almost exactly same as what he went through with a site.google but with Trezor.
    +
    +It's disgusting scammers just can AdPay to get there scam site be listed as the first site on Google above the original company.
    +
    +I'm a web developer, so it was fast for me to notice something is off and is a scam site. But I unfortunately think many will fall for it. Even though it should be commen knowledge not to type in your seed phrase online.
    +
    +comment: p2axqyg
    +parent: t1_p2auh0v
    +author: Badj83
    +created_utc: 1786123362
    +edited: false
    +body:
    +lol wdym? ColdCard was chilled by everyone as the top best way for everyone to self custody. Don’t come acting like people who used it were wreckless or dumb or ill informed. Any other more complicated wallet is just out of reach for the average holder. For me SC just failed to democratize and get safe and easy enough after all those years. I tried it, but swapped it for ETF now (for ease of use and tax incentives) and I am so glad I did.
    +
    +comment: p2ayy7o
    +parent: t1_p2aff1u
    +author: Peewee223
    +created_utc: 1786123667
    +edited: false
    +body:
    +Google runs one of the biggest web crawlers in the world.
    +
    +They could detect that an advertised site changed significantly and disable the ad until it's reviewed again.
    +
    +comment: p2az52q
    +parent: t1_p2ad13b
    +author: Free-Way-9220
    +created_utc: 1786123716
    +edited: false
    +body:
    +I've reported plenty scam ads to google. They are painfully slow at removing them. Hours later the scam ad is still up. it's a low priority for them
    +
    +comment: p2az9qu
    +parent: t1_p2aq8lu
    +author: Free-Way-9220
    +created_utc: 1786123749
    +edited: false
    +body:
    +IMO they're a very dishonest company at many levels, certainly the most dishonest out of all the companies I regularly deal with
    +
    +comment: p2b1pnp
    +parent: t1_p2ae3kt
    +author: NotFallacyBuffet
    +created_utc: 1786124377
    +edited: false
    +body:
    +What if a scammer puts an ad in a newspaper? Would you feel the newspaper's publisher liable?
    +
    +comment: p2b3ecm
    +parent: t1_p2aleaq
    +author: shpeucher
    +created_utc: 1786124809
    +edited: false
    +body:
    +Do~~n’t~~ Be Evil - Google 
    +
    +comment: p2b5o1e
    +parent: t1_p29yr27
    +author: McBurger
    +created_utc: 1786125383
    +edited: false
    +body:
    +But the Google sites even said “your information stays offline only!”
    +
    +comment: p2b5rc1
    +parent: t1_p2a318t
    +author: McBurger
    +created_utc: 1786125406
    +edited: false
    +body:
    +it’s not needed when it’s that obvious
    +
    +comment: p2b6415
    +parent: t3_1vi2jv0
    +author: Loud_Entertainer2724
    +created_utc: 1786125497
    +edited: false
    +body:
    +Putting all your savings into crypto is crazy.
    +
    +comment: p2b66vd
    +parent: t1_p2ag6hq
    +author: pinguluk
    +created_utc: 1786125518
    +edited: false
    +body:
    +/r/foundtheromanian
    +
    +comment: p2b67i3
    +parent: t1_p2amu0o
    +author: keralaindia
    +created_utc: 1786125522
    +edited: false
    +body:
    +Perfect example why crypto will never be mainstream. If you leave your wallet out, you should hope someone doesn't steal it in a civilized area.
    +
    +comment: p2b6ak5
    +parent: t1_p2a7gch
    +author: kingkongbiingbong
    +created_utc: 1786125544
    +edited: false
    +body:
    +***:: screams in choir boy ::***
    +
    +comment: p2b7ovm
    +parent: t3_1vi2jv0
    +author: piejlucas
    +created_utc: 1786125905
    +edited: false
    +body:
    +Anyone looking to buy a considerable amount of crypto as a store of value these days is far better off buying an ETF like IBIT.  No sense putting your money at risk with self custody especially if one has no clue what proper security looks like.  The learning curve was already steep and it just now got steeper with this entropy bs. 
    +
    +comment: p2b88vc
    +parent: t1_p2aee0h
    +author: DragonZeku
    +created_utc: 1786126049
    +edited: false
    +body:
    +Sometimes I think I should just put up a website called Give Me Your Money that is just this without the scam.  My page would just say: "This is not a scam, I am being honest and forthcoming about my intent to rob you.  Enter your seed phrase below and I will steal your BTC immediately."
    +
    +And I bet I would still make money from it.
    +
    +comment: p2b8qs2
    +parent: t3_1vi2jv0
    +author: gtwooh
    +created_utc: 1786126178
    +edited: false
    +body:
    +Top sponsored Google result smh enter the url directly people trezor.io ffs
    +
    +comment: p2b8se5
    +parent: t3_1vi2jv0
    +author: CraftyPerformance272
    +created_utc: 1786126190
    +edited: false
    +body:
    +First if you have your life savings in Bitcoin, all in one stock, all in silver or gold or anythings that's not Diversified you're an idiot. Second it's crazy how easy it is to get scammed. Almost ordered a product online because it was the Google sponsored website and it looked legitimate but the deals were slightly too good to be true so I just wanted to double-check. Someone basically cloned the real website and then paid Google to advertise the website above the actual legit website
    +
    +comment: p2b9jpx
    +parent: t1_p2b67i3
    +author: DJBunnies
    +created_utc: 1786126385
    +edited: false
    +body:
    +This isn't leaving your wallet out, this is shoving it into a box labelled `this is your bank, no really, even though we said you should never do this, do it now`
    +
    +comment: p2b9n51
    +parent: t1_p2b7ovm
    +author: aurelorba
    +created_utc: 1786126409
    +edited: false
    +body:
    +So basically the whole "trustless" feature of Bitcoin is really a bug? You always need an intermediary to mitigate risk.
    +
    +comment: p2b9t6r
    +parent: t1_p2b5rc1
    +author: IM-PT24
    +created_utc: 1786126452
    +edited: false
    +body:
    +You would be surprised. When I first look it up it was being downvoted, lol
    +
    +comment: p2bbaid
    +parent: t1_p2aaiph
    +author: PsychologicalArm2138
    +created_utc: 1786126832
    +edited: false
    +body:
    +Same 
    +
    +comment: p2bc4k2
    +parent: t1_p2a1gfk
    +author: Resident-Election867
    +created_utc: 1786127047
    +edited: false
    +body:
    +Get the Cyber Police on it.
    +
    +comment: p2bd9ml
    +parent: t3_1vi2jv0
    +author: Iapetus404
    +created_utc: 1786127338
    +edited: false
    +body:
    +yep, that happened many times.
    +
    +Also be careful guys when you download apps from Google store......also in past there was fake apps for exchanges and hot wallets.
    +
    +comment: p2beknw
    +parent: t1_p2apzqi
    +author: _SlipperySalmon_
    +created_utc: 1786127675
    +edited: false
    +body:
    +It's true. 
    +
    +If you're gonna self custody, you gotta respect that there will be limited to zero ability to recoup your losses though. 
    +
    +Be super vigilant. 
    +
    +I don't really understand how someone with "their life savings" in this could fall for this scam though? Like don't put your life savings on cold storage if you don't have a thorough grasp of what this means 
    +
    +comment: p2bf1kx
    +parent: t1_p2b88vc
    +author: dj_destroyer
    +created_utc: 1786127796
    +edited: false
    +body:
    +lmao I love it, where do I invest \*ahem\* enter my seed phrase
    +
    +comment: p2bf2sf
    +parent: t1_p2ae3kt
    +author: abbaziadicefalu
    +created_utc: 1786127805
    +edited: false
    +body:
    +Remember the YouTube giveaway scams on their homepage.
    +
    +Totally mind boggling they promoted that stuff.
    +
    +comment: p2bfpkm
    +parent: t1_p29yiko
    +author: nycteris91
    +created_utc: 1786127970
    +edited: false
    +body:
    +I sometimes think I'm being too paranoid for double‑checking the Electrum/sparrow URL before downloading the wallet for Linux: I look it up on Google, visit the official GitHub, and check Wikipedia just to make sure I'm on the legit site.
    +
    +comment: p2bg926
    +parent: t1_p2allyy
    +author: deny_by_default
    +created_utc: 1786128111
    +edited: false
    +body:
    +Same.
    +
    +comment: p2bheun
    +parent: t1_p2b1pnp
    +author: Michichael
    +created_utc: 1786128412
    +edited: false
    +body:
    +Yes. Due diligence is an obligation of the publisher to ensure they're not publishing illegal or harmful content.
    +
    +If a paper puts out an ad for a hitman, they're liable too. Google is negligent here. 
    +
    +comment: p2bhl32
    +parent: t1_p2aee0h
    +author: Michichael
    +created_utc: 1786128457
    +edited: false
    +body:
    +A coworker of mine and I frequently commented, being in infosec, how easy it would be to be a millionaire if we just didn't have morals.
    +
    +comment: p2biefp
    +parent: t1_p2b9jpx
    +author: keralaindia
    +created_utc: 1786128670
    +edited: false
    +body:
    +Again, this is theft. And why crypto will never be mainstream.
    +
    +comment: p2bj0it
    +parent: t3_1vi2jv0
    +author: Garland_Key
    +created_utc: 1786128828
    +edited: false
    +body:
    +STOP. PUTTING. YOUR. WHOLE. BAG. IN. ONE. PLACE.
    +
    +This needs to become a standard in our community: Don't put more Bitcoin than you can stomach losing on a single device.
    +
    +comment: p2bkags
    +parent: t1_p2acqni
    +author: Garland_Key
    +created_utc: 1786129159
    +edited: false
    +body:
    +Clearly they did not. 
    +
    +comment: p2bluzq
    +parent: t1_p29yiko
    +author: Practical_Mango7633
    +created_utc: 1786129573
    +edited: false
    +body:
    +Not only Trezor, they have the same up for Ledger as well. I tried both yesterday just out of curiosity. This has been going on for years, Google does not mind it earns it's revenue.  
    +
    +comment: p2bmqs3
    +parent: t1_p2b9n51
    +author: piejlucas
    +created_utc: 1786129808
    +edited: false
    +body:
    +One can always use a portion of crypto as intended .  However keeping your life savings stored in some hardware wallet whose vulnerability has yet to be exposed seems a bit risky to me. 
    +
    +comment: p2boe2a
    +parent: t1_p2biefp
    +author: Katolo
    +created_utc: 1786130241
    +edited: false
    +body:
    +Agreed. The only thing to stop it is regulation but that completely defeats the purpose of crypto.
    +
    +comment: p2bogrh
    +parent: t3_1vi2jv0
    +author: redjacktin
    +created_utc: 1786130260
    +edited: false
    +body:
    +This is on Google , they have had this issue forever but as long as you pay for adds they will put it up without content checking for phishing
    +
    +comment: p2boli1
    +parent: t3_1vi2jv0
    +author: Just_Bluebird_5268
    +created_utc: 1786130295
    +edited: false
    +body:
    +It's the future of money
    +
    +comment: p2bopvw
    +parent: t1_p2b6ak5
    +author: ZippyDan
    +created_utc: 1786130327
    +edited: false
    +body:
    +We're going to need you to remove yourself from that choir boy.
    +
    +comment: p2bqhvh
    +parent: t1_p2b88vc
    +author: jesusrambo
    +created_utc: 1786130798
    +edited: false
    +body:
    +This is called GofundMe lol
    
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  10. Earliest copy held
    seen · Captured here 21,014 chars
    Extracted text as captured
    post: 1vi2jv0
    author: True-Lychee
    created_utc: 1786113778
    title: Trezor user loses life savings by entering their seed phrase into a fake Google-sponsored Trezor website
    
    comment: p29xi9g
    parent: t3_1vi2jv0
    author: Enc0de-
    created_utc: 1786114020
    edited: false
    body:
    Damn. Sorry for the loss.
    
    comment: p29xt55
    parent: t1_p29xi9g
    author: True-Lychee
    created_utc: 1786114100
    edited: false
    body:
    It's staggering how many people will enter their seed into a website without thinking. The same one that they have been drilled repeatedly to 'never enter or share'.
    
    comment: p29yiko
    parent: t3_1vi2jv0
    author: RoyYourWorkingBoy
    created_utc: 1786114287
    edited: false
    body:
    Some people learn about scam sites by reading basic security advice, others learn by losing all their money. But everyone learns in the end.
    
    comment: p29yr27
    parent: t3_1vi2jv0
    author: bullett007
    created_utc: 1786114348
    edited: 1786115719
    body:
    # Rule #1: Enter seedphrase into Trezor device only.
    
    comment: p29z8y6
    parent: t3_1vi2jv0
    author: Previous_Blueberry_5

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.