Skip to main content

📧 How to Spot and Handle Phishing Emails: Protect Yourself From Scams

Learn how to identify phishing emails impersonating Trust Wallet, spot the red flags, and report them before your funds are at risk

Trust Wallet's only official support domain is trustwallet.com

Any email claiming to be from Trust Wallet that comes from a different domain is fraudulent. Check the sender address before reading anything else.

Confirmed fake domains used in phishing campaigns:


Red flags in phishing emails

  • Sender domain — hover over or tap the sender name to reveal the full email address. Legitimate Trust Wallet communications come only from @trustwallet.com.

  • Broken or unnatural language — phishing emails are often generated or translated, resulting in grammatically awkward phrasing.

  • A wallet address or "key" you didn't request — Trust Wallet never generates wallet addresses or private keys on your behalf and sends them via email.

  • Urgency and financial pressure — "your account will be locked," "funds will be lost," "activate within 24 hours."

  • Requests to send funds, pay fees, or "unlock" something — Trust Wallet will never ask you to send crypto to activate, verify, or unlock a wallet.

  • Unsolicited contact — we does not proactively email users about wallet issues or security alerts.


What to do if you receive a phishing email

  1. Do not reply, click any links, or download attachments

  2. Do not send any funds to any address mentioned

  3. Do not enter your secret phrase on any site linked from the email

  4. Report it using the steps below


How to report

Gmail:

  1. Open the email

  2. Click the three-dot menu (⋮) in the top right

  3. Select Report phishing

Outlook:

  1. Select the email

  2. Click JunkPhishingReport

To Trust Wallet: Please attach the email as an .EML file, including the sender’s address, any wallet addresses mentioned, and any links contained in the email.


Why Trust Wallet cannot email you about your wallet

Trust Wallet is a self-custody wallet. We do not hold your funds, manage your keys, or have access to your wallet. We have no system that generates wallet addresses on your behalf. Any email claiming otherwise is not from us.

Example of phishing email

Real phishing email received by a Trust Wallet user.

Note the sender domain: [email protected] — not trustwallet.com

Did this answer your question?