Phishing Site Mimics Trust Wallet Domain
Researchers flagged trastwallet.cam, a look-alike of the legitimate Trust Wallet site, which asks visitors to connect their crypto wallets.
Updated on Nov. 5, 2026 in Financial Crime
Live Poll
Do you feel confident you could spot a fake crypto wallet website?
Researchers identified the phishing site trastwallet.cam on November 4, 2026, impersonating Trust Wallet. The site prompts visitors to connect their wallets, and its backend scans connected balances and prepares transfers to fixed recipient addresses.
Why it matters
Phishing sites that imitate crypto wallet brands can lure users into exposing wallet access, putting funds at risk even when no losses have yet been tied to this specific domain. The activity fits a wider pattern, with Phishunt.io documenting at least nine suspicious sites associated with Trust Wallet as of early November.
Security researchers at Phishunt.io have documented at least nine active suspicious sites linked to Trust Wallet as of early November, with the fake trastwallet.cam domain differing from trustwallet.com by just two characters. No confirmed losses directly tied to the domain have been reported yet.
The players
Trust Wallet
Trust Wallet is a self-custody cryptocurrency wallet whose legitimate domain, trustwallet.com, is being imitated by the fake site.
Phishunt.io
Phishunt.io is a service that tracks and documents phishing and suspicious websites, and it reported at least nine active Trust Wallet-associated sites as of early November.
The details
The trastwallet.cam site asks visitors to connect their wallets, supposedly to review transfers, and supports connections from Trust Wallet, Phantom, and OKX wallets. Actual transaction signing was disabled on the site at the time of the report, and Trust Wallet has repeatedly warned users not to share seed phrases on third-party sites.
Timeline
October 30, 2026: Zürich police issued a warning about Trust Wallet-linked phishing emails.
November 4, 2026: Researchers identified the trastwallet.cam phishing site.
Big Picture
Trust Wallet has repeatedly warned users against sharing seed phrases on third-party sites, and the trastwallet.cam domain operates in direct defiance of that guidance by asking visitors to connect their wallets. The pattern mirrors the look-alike domain tactics that have targeted crypto wallet users across the sector.
Users should verify that any wallet site matches the exact legitimate domain, since trastwallet.cam differs from trustwallet.com by two characters. Connecting a wallet to an unverified site can expose balances and enable unauthorized transfers, so users should never share seed phrases with third parties.
The takeaway
Before connecting any crypto wallet, check the domain character by character against the official source, because look-alike sites can mimic a trusted brand closely enough to pass a quick glance. Never share a seed phrase, regardless of what a website claims it is for.
Further reading
Learn more about the tactics behind Financial Crime schemes that target digital asset holders.
Source note: This article includes information reported by Crypto Briefing.
Live Poll
Do you feel confident you could spot a fake crypto wallet website?
