Trezor Portfolio Deletion Clause in Trezor Terms of Service

Trezor “portfolio deletion fraud

Yesterday I had a phone call from a person who claimed they were aol security. I was very busy with projects going on and should’ve maybe paid closer attention. This person said it appeared there was a breach in my aol account and that they are going to prevent anyone from logging onto it, but I was OK as long as I was currently connected with any of my devices. I said OK good to know as they were not asking me for any information or to do anything at all. Basically all I did was thank them for their diligence.

About an hour later, I get a call from a person named Alexander who claims he was with Trezor and that I had emailed with them with a request to cancel my Trezor account. They asked me if I had sent them an email asking for it to be deleted and I said no way in hell. They told me to look at my sent emails and sure enough there’s an email from my account with my personal information asking them to delete my portfolio. I told him this wasn’t me and not to touch it and how would they be able to do it anyway as I control my device not them. They said when I signed up with Trezor that in the agreement they have the ability to delete an account if a customer requests it. I said that’s nonsense, you can identify me, and I am demanding you not touch the account. The guy says maybe they could’ve done that 15 minutes ago but now it’s too late. We can’t stop the process. Then they emailed me a ticket number and said if I click on that link, it will take me to a verification page where upon I can enter my Seed phrase to confirm that it is my wallet. And that if I didn’t do this, they would shut down the portfolio and transfer the cryptocurrencies to other addresses. Then they upped the pressure as they showed me another email from this impostor that said please hurry, my wife is in the hospital and I need this money to help save her. I had to stop operating my business and deal with this issue I really didn’t have time for, I got flustered, got very upset and they almost got me. I haven’t touched my Trezor since 2017, have on average a quarter million in there. Basically I have not paid attention to cryptocurrencies since 2017 and have forgotten a lot of the procedures etc so they almost had me convinced I had to provide my seed phrase to verify the account. Fortunately I googled around and saw that Trezor had some kind of a email, database leak, etc. etc. and with further investigation determined that as long as no one has my seed or pin number that my Trezor cannot be breached. below are the two emails in question without my info in them and also the phone numbers of these people. One was named Pat, the other Alexander. Here are their phone numbers:

(redacted)

(redacted)

Here is the first email I “sent” without the personal information:

“ I would like my Trezor account to be deleted or deactivated. I am

thinking of taking myself out of cryptocurrency as a whole, and would

have no need for a wallet with you guys anymore. I had submitted all

the verification on your website. My ID and information has been

submitted, and I was told to email your guys’ support email as the

final step of the process. I submitted the cryptocurrency addresses

to where I would like my funds to be withdrawn before the portfolio

deletion on the website. Thank you so much.

Once again here’s my verification details”

I asked them what are the cryptocurrency addresses for the funds withdrawal or the last four numbers and they said they couldn’t give that to me as that was private information!

Here is the second email I “sent”:

“Hello this is an urgent manner I have to pay for hospital bills my wife is currently in the hospital and is in need of immediate treatment, I need the money moved to the addresses I provided as soon as possible so I can save my wife. Please hurry this is extremely urgent.”

The email address they were sent to is [email protected].

So my question to TREO security if you read this, it appears to me these guys were dumb enough to use telephones as opposed to something like Telegram. is this an FBI issue?

What does gobsmack me is the fact that TREO does not have a phone number to call in case of emergencies like this. Of course from their side maybe they get thousands of issues like this and they don’t want to dedicate the personnel and labor costs to handle issues like this, deal with customer verification, etc.

I’m 71 years old, still working hard, but they had me so freaked out I thought I was going to have a heart attack. I called aol and made sure that I was now the only user on the account with new password, etc.

Good on you to spot the scam in time!

Cryptocurrency world is complicated enough as it is, fraudsters trying to take advantage certainly don’t help the matter.

For the record, it is very likely part of the same scam. If they legitimately detected a breach, they should have prevented you and anyone else from logging in, and log off every authorized device.
Otherwise they would have a hard time telling who’s the authorized user and who isn’t.

Hard to say whether you have any sort of case, and it’s unclear if FBI is the right agency.
But in general, yes, some sort of law enforcement should handle this. At the very least, they hacked your e-mail account.

Well, the issue here is that Trezor Company is not a banking service. It is a seller of hardware.
Trezor is a self-custody solution, meaning you are the custodian of your funds.
(That’s how they get you – if you give out your seed, that gives the scammers the full authority over your funds. They’re also the custodians at that point.)

You don’t have any sort of “account with Trezor”. That’s not a thing that exists. (Kind of like you don’t have an “account with Bellroy” if you buy their leather wallet.) In fact, if it’s more than 90 days from purchase, Trezor doesn’t even have any of your personal information.

So it would make no sense to keep a “customer support hotline” for things related to “accounts”. The only users of this hotline would be the people actively getting scammed – plus, of course, everyone who has any sort of trouble with the hardware, making the queue longer for people actively getting scammed.
(furthermore, half the people actively getting scammed wouldn’t even think of calling Trezor when they’re “currently on the phone with Trezor”, right? :woman_shrugging: )

I mean, it may very well make sense to keep a support line specifically for people actively getting scammed. But that’s unfortunately not how it works right now.


Again, good on you to spot this in time, and thanks for the detailed report.

(I am redacting the phone numbers, on the off chance that someone decides to call them.)

1 Like

Thank you for your response and feedback.