A new phishing website, tlezor.io has surfaced that’s imitating the Trezor brand. The website intends to steal the user’s recovery seed which would give scammers control over the user’s funds tied to their Trezor device.
The newest phishing site is one of many that have surfaced over the last couple of weeks. The websites looks like a near-identical clone to the original to and have the same features and functionality.
To make sure you are visiting the correct addresses for Ledger, ensure that the address bar shows ledger.com. For Trezor, the actual site’s address is trezor.io.
Below are some examples of the phishing domains:
As Bitcoin Exchange Guide reported earlier this week, scammers are serving up Google ads to direct people to these domains. The scammers will be paid each time a user clicks on the ad, and it’s uncertain how many people have clicked or otherwise fallen victim to this newest scam.
Some users on Twitter have been quick to point out that these domains are being used by scammers and have let both Ledger and Trezor know of their existence.
— Rob Furse (@basecan) November 24, 2019