Binance co-founder Changpeng Zhao has issued an urgent warning about a fraudulent website impersonating Trust Wallet. The malicious domain trastwallet[.]cam uses a .cam extension to deceive users, prompting them to connect wallets under the pretext of reviewing transfers. Security researcher Anurag, who operates the Malwarehunter account on X, identified the site on November 4. Its JavaScript supports connections to Trust Wallet, Phantom, and OKX Wallet, while a backend API scans wallet balances and prepares transfers to hardcoded recipient addresses. The page lists per-asset limits from $1 to $5,000 before requesting wallet connections.
Zhao amplified the warning on X, stating: “more phishing websites out there… .cam is not .com. Be careful.” The alert follows a separate Bitdefender report describing phishing emails that exploited concerns around a recent Binance security incident. Those fraudulent messages impersonated Trust Wallet representatives and falsely claimed users had to complete verification by November 7 or face account suspension. The email campaign targeted users in the United States, United Kingdom, Australia, Ireland, and South Africa.
In a related but unverified claim, an X account alleged that roughly $1.1 million was stolen from Trust Wallet users through an exploit affecting devices running iOS 18.5. Screenshots showed USDT transfers to Binance deposit addresses, but no direct link to the alleged iPhone vulnerability was confirmed. Trust Wallet has faced multiple security incidents over the past year, including malicious code in Chrome extension version 2.68 in December 2025 and a fake crypto card website in October 2026. OneKey founder Yishi Wang also warned about hardware weaknesses in older iPhone models, highlighting a layered threat environment for mobile wallet users.
