← Back to FAQ page

Trust Wallet shows unauthorized transfers. Does that mean the wallet is compromised?

FAQ | Updated 2026-03-18

What it usually means

  • If you did not initiate the transfers, assume the wallet is compromised until proven otherwise.
  • The cause may be a leaked seed phrase, malicious approval, fake wallet import, clipboard malware, or social engineering.

Immediate actions

  • Stop reusing the wallet for storage or fresh deposits.
  • Move remaining funds to a fresh wallet if you still have control.
  • Review token approvals and connected dapps on every chain you used.

Evidence to preserve

  • Wallet address, unauthorized TXIDs, token names, contract approvals, timestamps, and explorer screenshots.
  • Any links, QR codes, browser tabs, or messages you interacted with before the incident.
  • Notes on whether you entered the seed phrase anywhere outside the official setup.

Practical recovery outlook

  • Wallet apps cannot reverse on-chain transfers.
  • The best chance comes from tracing the funds to an identifiable service quickly.
Request an initial assessment