Trezor issues urgent phishing warning amid Coldcard security incident

Trezor has issued a public warning about a surge in phishing attempts that exploit the recent Coldcard security incident. The company, a leading hardware wallet manufacturer, cautioned users against sharing their recovery seeds with anyone, emphasizing that legitimate operations never require such sensitive information.

Phishing attempts on the rise

In a post on X (formerly Twitter), Trezor stated that recovery seeds should only be entered directly on a Trezor device when restoring a wallet. The company reiterated that it never asks users for their recovery seeds under any circumstances, and any such request is a red flag.

Scammers are reportedly using the Coldcard security incident as a pretext to trick users into revealing their seed phrases. These phishing attempts often involve fake migration instructions or urgent warnings sent via email, SMS, or phone calls, urging users to act quickly to protect their funds.

Coldcard incident: what we know so far

The Coldcard security incident has led to significant losses across the cryptocurrency community. According to Galaxy Research, approximately 1,596 BTC has been stolen from over 7,300 addresses, with the total potentially rising to as much as 2,055 BTC as investigations continue.

Trezor clarified that it was not affected by the Coldcard incident, but the company is proactively warning users to remain vigilant against phishing attempts that exploit such events for malicious purposes.

How users can protect themselves

Trezor advises users to always double-check the authenticity of any communication claiming to be from a wallet provider. Key safety measures include:

• Never share recovery seeds with anyone, including customer support representatives.
• Ignore any instructions to migrate wallets that are sent via email, message, or phone.
• Only enter recovery seeds directly on the hardware device itself during wallet restoration.
• Verify all official communications through the company’s verified channels.

Why this matters to the crypto community

Phishing attacks are one of the most common threats in the cryptocurrency space, and incidents like the Coldcard breach provide fertile ground for scammers. This warning from Trezor highlights the importance of user education and proactive security measures in protecting digital assets.

As the crypto industry continues to grow, so do the tactics of malicious actors. Staying informed and adhering to best practices is essential for anyone holding cryptocurrency, regardless of the wallet they use.

Conclusion

Trezor’s warning serves as a timely reminder of the persistent threat of phishing in the crypto ecosystem. Users should remain cautious, verify all communications, and never disclose their recovery seeds. While the Coldcard incident is still unfolding, the broader lesson is clear: security begins with the user.

FAQs

Q1: What is the Coldcard security incident?
The Coldcard security incident refers to a recent security breach involving Coldcard hardware wallets, leading to the theft of over 1,500 BTC from thousands of addresses. The full scope is still being assessed.

Q2: Is Trezor affected by the Coldcard incident?
No, Trezor has confirmed that it was not affected by the Coldcard security incident. The company issued the warning to help users avoid phishing attempts that exploit the incident.

Q3: How can I identify a phishing attempt?
Phishing attempts often involve urgent requests for your recovery seed, unsolicited migration instructions, or messages claiming to be from support. Always verify communications through official channels and never share your seed phrase.