← Back to FAQ page
Trust Wallet shows unauthorized transfers. Does that mean the wallet is compromised?
FAQ | Updated 2026-03-18
What it usually means
- If you did not initiate the transfers, assume the wallet is compromised until proven otherwise.
- The cause may be a leaked seed phrase, malicious approval, fake wallet import, clipboard malware, or social engineering.
Immediate actions
- Stop reusing the wallet for storage or fresh deposits.
- Move remaining funds to a fresh wallet if you still have control.
- Review token approvals and connected dapps on every chain you used.
Evidence to preserve
- Wallet address, unauthorized TXIDs, token names, contract approvals, timestamps, and explorer screenshots.
- Any links, QR codes, browser tabs, or messages you interacted with before the incident.
- Notes on whether you entered the seed phrase anywhere outside the official setup.
Practical recovery outlook
- Wallet apps cannot reverse on-chain transfers.
- The best chance comes from tracing the funds to an identifiable service quickly.
Request an initial assessment