Trust Wallet users warned of phishing site trastwallet.cam

A lookalike domain scans connected wallets and prepares transfers to fixed addresses, as part of a wider campaign aimed at Trust Wallet users A fake Trust Wallet website is asking users to connect their wallets. The real goal is to see what’s inside them and move it elsewhere. The site sits at trastwallet.cam, a domain built to pass a quick glance. Researchers identified it on November 4, 2026. Two letters separate it from the real thing, and that gap is the whole scam. How the trastwallet.cam scam works The pitch is simple. Visitors are prompted to connect their wallets, supposedly so they can review transfers. Technically, the code relies on a backend API to scan the connected wallet’s balances. It then prepares transfers to fixed recipient addresses. Put plainly, the site figures out what you hold and lines it up to be sent to wallets the scammers control. The script isn’t picky about its victims either. It supports connections from Trust Wallet, Phantom, and OKX wallets. There is one small mercy in the findings. At the time of the report, actual transaction signing was disabled on the site. Signing is the step where a user approves a transaction in their wallet. Without it, the...