How the scam works
Every token has a decimals field — a technical value that tells your wallet how to display its balance. Real USDT on TRON uses 6 decimals, meaning 1,000,000 units = $1.00.
A scammer deploys a worthless token, sets decimals to 0, sends you 1,000,000 units, and your wallet shows 1,000,000 — which they claim is $1,000,000 USDT. There is no real value, no liquidity, and no way to sell it.
To "release," "withdraw," or "transfer" the funds, the scammer asks you to pay a fee, tax, or deposit. That payment goes directly to them.
How to recognize the trap
The Import crypto screen in Trust Wallet shows a warning:
"Anyone can create a token, including fake versions of existing tokens."
For verified, legitimate tokens, the Decimals field is locked and cannot be edited. If a scammer instructs you to:
Use "Add token manually" instead of entering a contract address
Change the Decimals field to a different number
Override any pre-filled information the app provides
Stop immediately. These instructions exist only to fabricate a false balance.
Reference decimals for common tokens
Token | Network | Correct decimals |
USDT | Ethereum / TRON | 6 |
USDC | Ethereum | 6 |
ETH | Ethereum | 18 |
BNB | BNB Smart Chain | 18 |
TRX | TRON | 6 |
BTC (wrapped) | Ethereum / BNB | 8 |
How to verify a token before importing
Always import by contract address — paste it in the Contract address field and let the app auto-fill. Never manually type token details from a scammer's instructions
Get the contract address from official sources only — the project's official website, verified CoinMarketCap or CoinGecko listing, or official GitHub
Check that the Decimals field is locked and shows the correct value. If it's editable, do not import
Verify on GoPlus Security at gopluslabs.io/token-security
If you have already paid fees
The funds you paid are gone — blockchain transactions are irreversible. Stop all further payments immediately regardless of what the scammer tells you about "one final fee."
Report the incident to us with the scam token's contract address and any wallet addresses you sent funds to. Also report on chainabuse.com.
