Binance’s CZ Issues Urgent Warning Over Fake Trust Wallet Website Targeting Crypto Users

Summary

• Binance co-founder CZ warned cryptocurrency users about a fraudulent Trust Wallet website designed to steal funds through malicious wallet connections.
• Cybersecurity firm Bitdefender identified phishing emails exploiting Binance’s security breach to trick Trust Wallet users into completing fraudulent verification procedures.
• CYFIRMA researchers previously uncovered malicious QR codes targeting Trust Wallet users through Telegram, revealing another method scammers employ against investors.

Binance co-founder Changpeng Zhao (CZ) has warned cryptocurrency users about a phishing website designed to mimic Trust Wallet and steal funds. The warning highlights a fraudulent platform that tricks wallet holders into connecting their accounts under the pretext of reviewing transactions.

CZ Exposes Fake Trust Wallet Website Designed to Target Crypto Funds

According to CZ’s latest warning on X, scammers created a deceptive website using a domain fdrd siaurij ezxnwfiou Trust Wallet’s official address.

The attackers replaced the letter “u” with “a” and changed the domain extension from “.com” to “.cam”

These modifications make the fraudulent address resemble the legitimate platform, potentially misleading users who overlook minor differences in website addresses. Once visitors access the counterfeit platform, the website prompts them to connect their cryptocurrency wallets to review transaction histories.

Significantly, the malicious website contains JavaScript code that attempts to examine connected wallet balances through a backend application programming interface. The attackers use this information to prepare transactions directing cryptocurrency toward designated wallet addresses, potentially exposing unsuspecting users to financial losses.

Additionally, the fraudulent platform supports connections with several popular cryptocurrency wallets, including Trust Wallet, Phantom, and OKX Wallet. This compatibility expands the potential target pool beyond Trust Wallet users, exposing holders across multiple cryptocurrency wallet applications. CZ’s warning identifies the suspicious domain and transaction review feature as important indicators of the fraudulent operation.

Bitdefender Identifies Related Phishing Campaign Following Binance Security Breach

The warning follows a separate phishing campaign that exploited concerns surrounding Binance’s recent security breach to deceive cryptocurrency holders. On November 3, cybersecurity company Bitdefender reported that scammers distributed fraudulent emails impersonating Trust Wallet representatives.

These messages falsely suggested that the Binance security incident had also compromised Trust Wallet users, requiring immediate account verification. Furthermore, the emails instructed recipients to complete a mandatory verification procedure or face account suspension after November 7.

Investigators identified phishing activity affecting users across several countries, including the United States, the United Kingdom, Australia, Ireland, and South Africa.

The fraudulent messages directed recipients toward counterfeit verification websites designed to collect sensitive wallet credentials and recovery information. Unlike CZ’s reported website, which attempts to prepare unauthorized transactions, the email campaign seeks sensitive information through fabricated security requirements.

Previous Trust Wallet Attacks Reveal Additional Phishing Methods

Earlier investigations also identified attackers using different methods to target cryptocurrency holders through Trust Wallet-associated platforms. Cybersecurity researchers at CYFIRMA previously uncovered a phishing operation that distributed malicious QR codes through the Telegram messaging app.

The campaign demonstrated how attackers could use familiar communication channels to direct wallet holders toward potentially dangerous destinations. Together, the reported incidents show several methods scammers have used to impersonate trusted cryptocurrency services and approach wallet users.

CZ’s latest alert specifically concerns a counterfeit website that combines deceptive domain spelling with malicious wallet connection functionality. The warning also highlights the importance of distinguishing legitimate wallet services from fraudulent websites that imitate their branding.