Trezor call and email from trezor about data breach on crypto exchange

I received a call and email from crypto dot com this morning saying that my data had been leaked and a scammer asked if the recent login and request to change email was legit. It wasnt and came from Thailand. They then said they would contact Trezor to get in touch with me and gave me a reference number.

I received a call from an unknown number from a person saying they are a Trezor rep, based in the UK.

He send me an email from no-reply (at) trezor

This was suspicious as it wasnt from a Trezor dot io address. He asked me to go to Trezor-help dot com to verify if the firmware and software for my Trezor was legit. Said scammers could have pushed a fake update and changed a couple of lines of code, to access my Trezor remotely. I ended the call and need to find out if this a legit Trezor representative. Is there another way to verify if my firmware is legit ? Has anyone else received a call like this? First genuine crypto stress.

Trezor representatives never call you on the phone, and especially not cold-call you.

Remember that Trezor is a self custody solution. You don’t have an “account” with Trezor and there is really no way for Trezor to proactively follow up with you on anything.

Also remember that it is practically impossible to replace your firmware with a fake, without triggering all sorts of checks and defences.

You can rest easy: your firmware is legit.

The “representative” was a scammer, there are pretty intense scam campaigns going around. Unfortunately they got your phone number from some leak or another.

In cases like these, it’s possible that the scammers also got access to your mailbox. If you are using Gmail, make sure to run the Security Checkup.

thankyou for your reply. Crypto dot com also confirmed that the first scam call wasnt them. I should have checked this first as I would have hung up on the the Trezor fake rep straight away.