Phishing Scam via Google Ads Steals Millions from Trezor Users

• •A phishing site impersonating Trezor stole approximately $1.6 million from users.
• •The fraudulent page was hosted on Google Sites, enhancing its perceived legitimacy.
• •Trezor has issued warnings and is collaborating with Google to address the issue.

A phishing scam impersonating Trezor appeared at the top of Google search results, leading users to a fraudulent site that collected wallet recovery phrases. A victim identified as David reported losing his life savings, approximately 24.04 BTC valued at $1.6 million, after entering his recovery seed on the phishing page. The page was hosted on Google Sites, making it appear legitimate. Trezor confirmed the incident and warned users against entering recovery phrases on any website. The attack highlights a growing trend of phishing schemes using Google ads to mislead crypto users. Trezor has escalated the issue internally and is working with Google to remove the fraudulent site. The incident underscores the importance of verifying URLs and avoiding entering sensitive information online.