Fake Trust Wallet Site trastwallet.cam Scans Connected Wallets, Prepares Transfers

A fake Trust Wallet website at trastwallet.cam scans connected wallets and prepares transfers to fixed recipient addresses, according to Crypto Briefing, which reported that researchers identified the domain on November 4, 2026. Transaction signing was disabled on the site at the time of the report, and no confirmed losses tied directly to it have been reported.

How the trastwallet.cam Scam Operates

The site prompts visitors to connect their wallets, supposedly so they can review transfers. Its code relies on a backend API to scan the connected wallet's balances and then prepares transfers to addresses the scammers control. The script accepts connections from Trust Wallet, Phantom and OKX wallets.

Signing is the step where a user approves a transaction in their wallet, and without it the prepared transfers cannot go through. The report describes the disabled signing as a loaded tool rather than a harmless one. The legitimate domain is trustwallet.com; the impostor swaps the "u" in trust for an "a" and the .com ending for .cam.

Trastwallet.cam is one piece of an ongoing campaign targeting Trust Wallet users that includes multiple lookalike domains and fake support interfaces. Security monitoring platform Phishunt.io has documented at least nine active suspicious sites associated with Trust Wallet as of early November. On October 30, 2026, Zürich police issued a warning about phishing emails linked to Trust Wallet, less than a week before trastwallet.cam surfaced.

Trust Wallet's Scale and Recent Product Moves

Trust Wallet is a non-custodial multi-chain cryptocurrency wallet serving more than 220 million users across 100 or more blockchains, according to akta.pro company records. The same records list a revenue estimate of $25 million to $50 million and a valuation estimate of $1 billion to $5 billion. Trust Wallet was founded in 2017, is headquartered in Dubai and is majority-owned by Binance founder Changpeng Zhao, with Felix Fan as chief executive.

Earlier Trust Wallet Security Reports

On November 4, 2026, crypto.news reported that a Trust Wallet user lost 3,830 USDT without authorizing any transaction, and that other users complained about failed swaps and a drained wallet after an impersonating support representative. On October 30, 2026, Crypto Briefing reported that Trust Wallet announced new security procedures and code-hardening plans after AI-driven attacks on Polymarket and Binance, with CEO Felix Fan saying the wallet would keep specifics private but might release reports and collaborate with security firms. On October 22, 2026, U.Today reported that Trust Wallet declared its infrastructure secure after the PHP Shell vulnerability, stating its applications do not use PHP.

Trust Wallet's Guidance for Users

Trust Wallet has repeatedly warned users against sharing seed phrases on third-party sites. The report advises checking the URL character by character, bookmarking trustwallet.com and using the bookmark instead of links from emails, messages or ads, and declining any signing request for a transfer the user did not initiate.