Lost a load of USDT after approving a malicious transaction from a fake Revolut pop-up, is it gone?

asked 14d ago7 views37 answers
0

Hey everyone, I'm feeling sick to my stomach right now. I was just browsing on my laptop, minding my own business, when this pop-up appeared saying it was from Revolut and that my account needed urgent verification due to suspicious activity. It looked super legitimate, had the Revolut logo, everything. I clicked it, logged in as usual, and it asked for a transaction approval on my Trust Wallet for 'security purposes'. I didn't even think, just approved it – it was late, I was tired, stupid me. Next thing I know, my USDT balance is gone. Like, completely wiped out. I immediately checked my transaction history and it shows a transfer to some random address. Is there ANY way to reverse this? Or is my USDT just gone forever? I've never had something like this happen before. Revolut support just said they can't help with crypto transfers and Trust Wallet said the transaction is irreversible. I'm honestly desperate.

Mentioned in this discussion
Trust Wallet· neutral

37 Answers

47

Ugh, feel for you, this is a classic wallet drainer scam, unfortunately. Approving that transaction, even if it said 'security purposes', essentially gave the scammer permission to move funds from your Trust Wallet. This is different from just sending funds to a wrong address because you actively signed off on a smart contract interaction that transferred your tokens.

Firstly, make sure your wallet is secure – disconnect it from anything suspicious, revoke any approvals you don't recognize immediately. You can use sites like Revoke.cash for that. For the USDT itself, it's on the blockchain, right? So the transaction is immutable and irreversible. Once it's sent to the scammer's address, the only way to get it back is if they send it back, which they won't.

The best thing you can do now is trace the funds. You can use services like ChainAbuse or TRM Labs, which are used by law enforcement, to follow where your USDT went. If it ends up on a centralized exchange like Binance or Kraken, there's a *small* chance that exchange might freeze the funds if a strong enough police report is filed quickly enough. But this is a big IF. Most likely, it'll get tumbled or moved through multiple addresses making it untraceable. File a police report in South Africa and report it to any local cybercrime units; document EVERYTHING.

Yi Lau · Singapore, Singaporeanswered 14d ago
28

Mate, I had pretty much the exact same kinda thing happen to me, but with a fake 'Coinbase security alert' that ended up draining some ETH from my MetaMask. Was so convincing. My heart sank when I saw it was gone. Fwiw, I contacted the police here in Cardiff and they were... less than helpful. Said it's crypto, cross-border, basically a lost cause from their end. I tried tracing it myself for a bit, but it just went into a tornado of other transactions.

Didn't get my money back. It's a horrible feeling. Lesson learned the hardest way possible. Always, always check the URL, even if it looks perfect. And never approve anything you don't explicitly initiate yourself for a transaction you understand. Sorry to hear you're going through this, it sucks big time. You're not alone.

Daniel Evans · Cardiff, United Kingdomanswered 14d ago
35

Honestly, once that smart contract was signed and the transaction confirmed on the blockchain, it's pretty much gone. People talk about tracing and freezing, but in reality, for individual cases, especially for amounts that aren't humongous, the chances of getting it back are incredibly slim. The scammers are good at moving funds quickly through mixers or other wallets. Don't fall for anyone messaging you now claiming they can 'recover' your crypto for an upfront fee – those are 100% recovery scams. Just another way to fleece you when you're already down.

Cian O'Brien · Galway, Irelandanswered 14d ago
22

Oh, Sipho, I am so truly sorry this happened to you. It's an awful experience and it's completely understandable to feel sick. These phishing scams are getting so sophisticated, it's easy to see how anyone could fall for them, especially when you're tired. Please don't beat yourself up too much.

While recovering the funds directly is very difficult, as others have said, reporting it is still important. It helps authorities build intelligence on these scam networks. Beyond the police, you can also report to your country's financial watchdog if they have a cybercrime unit. For future, always, always go directly to the official Revolut app or website by typing the URL yourself, never through pop-ups or links in emails/SMS, no matter how real they look. And double-check *every* detail before connecting your wallet or approving transactions.

Anna van Dijk · Almere, Netherlandsanswered 14d ago
19

Look, with crypto, especially once confirmed on-chain, it's almost always final. The decentralized nature means no bank or intermediary can hit an 'undo' button. If your USDT went to some scammer's address, you pretty much kissed it goodbye. All these 'recovery' firms popping up are just preying on vulnerable people. Don't engage with them, you'll just lose more money. The only slim, very slim, hope is if the scammer was foolish enough to send it straight to a KYC'd exchange and you have a strong police report, but that rarely happens.

Mohammed Al Maktoum · Ras Al Khaimah, UAEanswered 13d ago
14

Yeah, that's rough. Unfortunately, 'approving a malicious transaction' is usually the nail in the coffin for crypto. It means you gave permission, even if unwittingly, for your wallet to be drained. It's not like a bank transfer you can dispute. The blockchain doesn't care if you were tricked – it just records the valid transaction you signed. I wouldn't hold out much hope for recovery, really. Just gotta learn from it. Really sorry, this kind of thing is everywhere right now. My cousin almost fell for a similar 'Binance KYC' scam last week.

Olivia Gagne · Montreal, Canadaanswered 13d ago
11

Oh non, Sipho, this is exactly what happened to my friend's cousin in Nice just a few months ago after a fake 'Monzo security alert'. Lost about 4,000 EUR in ETH. She went to the police, tried everything. The funds were moved so fast, within minutes, through multiple addresses. It's a brutal reality. The feeling of violation is just as bad as the financial loss, sometimes worse. These criminals are heartless. I really hope you find some peace from this soon, even if the money is gone. Stay vigilant, always. Never trust a pop-up.

Camille Leroy · Toulouse, Franceanswered 13d ago
8

I'm in Cape Town and just experienced something similar, although it was a lot less money, thankfully. Mine was a fake 'Capitec Bank' online banking message that redirected me to a dodgy site where I foolishly confirmed a 'test' transaction on my Trust Wallet. It looked so real! Lost about $300 equivalent in BNB. The shame honestly. I didn't even bother reporting it to the police, felt too embarrassed. Knowing now it's probably irreversible makes me feel a bit better about not wasting my time, but still, it stings. Feel for you Sipho, it's a harsh lesson.

Olivia Kruger · Cape Town, South Africaanswered 13d ago
6

Man, that sucks BIG time. I got got by a different type of wallet drainer, it was a fake 'staking pool' for some altcoin I was holding. Connected my Trust Wallet, approved what I thought was staking, and boom, everything gone. This was like three months ago, and I'm still salty. I tried reaching out to a few legit-sounding recovery places but realized quickly they were all asking for upfront fees, which is a major red flag. So I backed out. At this point, I've just accepted it as a very expensive lesson in verifying everything. Just make sure your remaining crypto, if any, is super secure now.

Steven Hall · Minneapolis, USAanswered 13d ago
3

Hey Sipho, sounds absolutely horrendous. I went through a crypto scam myself last year – not exactly the same, mine was a 'pig butchering' thing – but the feeling of utter powerlessness and betrayal is universal. While the specifics of your Revocation (the malicious transaction approval) mean the funds are likely gone, the crucial step now is to secure your *remaining* digital assets. Change all passwords, enable 2FA everywhere, consider moving funds to a entirely new wallet with a new seed phrase. And educate yourself like crazy on common crypto phishing tactics. Every pop-up, every email, every link – scrutinize it. It's a brutal wake-up call, but it can make you super scam-resilient for the future. Don't let it stop you from learning about crypto, just learn the security side first.

Jack Murphy · Waterford, Irelandanswered 13d ago
3

Ah, the old fake bank pop-up leading to a fake approval request. Classic phishing, unfortunately. That Revolut pop-up sounds like it was designed *specifically* to trick you into interacting with your wallet. When they ask to approve a transaction for "security," it's almost always a scam. The USDT is likely sent to an address controlled by the scammers and, frankly, recovery is incredibly difficult, bordering on impossible once it's moved off-chain or through mixers. I'd report the website to your browser's security features and maybe to ChainAbuse's reporting portal. It won't get your money back, but it helps warn others.

Samuel Lau · Singapore, Singaporeanswered 13d ago
2

Oh no, that's absolutely horrible! I can only imagine how you must be feeling right now. It's so easy to fall for these things, especially when you're tired or just not expecting it. That pop-up sounds terrifyingly convincing. Don't beat yourself up too much, okay? These scams are getting incredibly sophisticated. I wish I had some magic words to help, but honestly, support from places like Revolut and Trust Wallet are usually super limited when it comes to crypto directly. Just breathe, and let's see if anyone here has seen something similar.

Ming Ng · Singapore, Singaporeanswered 13d ago
1

I'm sorry mate, but 'urgent verification' and 'approving a transaction' for shady reasons are massive red flags. And popping up from a website? That's not how banks or wallets usually work for verifications. They don't typically force pop-ups or ask for wallet approvals that way. Trust Wallet showing it as irreversible is pretty standard for blockchain transactions. Unless the funds are still sitting in a wallet you can identify and is somehow linked to a known exchange that cooperates with law enforcement requests (which is rare for USDT), it's probably gone. That random address is likely a dead end.

William Jones · Sydney, Australiaanswered 13d ago
1

Yeah, the fake pop-up thing is super common. They get you with the emergency language. And asking for a wallet transaction approval right after? That's the giveaway. If you approved a transaction to a random wallet address, that's a direct token transfer out of your control. Trust Wallet is right, the blockchain doesn't have a 'undo' button. The only slim chance would be if the scammers were incredibly lazy and just sent it to a Binance or Coinbase deposit address that you *might* (and I mean, like, 0.001% chance) be able to get flagged by the exchange if you reported it fast enough with enough transaction details. But that's a long shot.

Xin Koh · Singapore, Singaporeanswered 13d ago
3

This sounds like a classic 'token approval scam' where they trick you into signing a transaction that grants *their* wallet permission to spend your tokens. When you then 'approved' it thinking it was for verification, they likely immediately used that approval to drain your USDT. The problem is, your wallet gave permission directly. Revolut can't touch crypto and Trust Wallet can't reverse a confirmed blockchain transaction. Did you happen to approve a transferFrom or an allowance function to their address? If so, your USDT is gone from your wallet unless they made a mistake. Always review *what* you're approving. A key red flag is if the transaction details show a large amount being sent to a new, unrecognised address, or if the description for the approval is vague.

Liam de Boer · Groningen, Netherlandsanswered 13d ago
3

I had something similar happen to me on a different network last year. I got a fake email from what looked like my bank, tried to 'log in', and ended up connecting my wallet to a sketch site. Lost about $1k in ETH. I felt like the dumbest person alive. They told me the same thing about it being irreversible. I contacted everyone, even those 'funds recovery specialists' and they were just more scammers. They just take your money. I spent weeks looking at blockchain explorers trying to follow the money, but it just vanished into tumblers. You're not alone in this nightmare.

Joshua Miller · Miami, USAanswered 13d ago
4

Okay, deep breaths. This is a nasty variation of a phishing scam. The fake Revolut pop-up is social engineering 101: create urgency, mimic a trusted brand. The critical part is that you approved a transaction *within your Trust Wallet*. This means you signed a message on the blockchain. Scammers often use fake dApp interfaces or malicious transaction requests disguised as security checks. If you approved a transaction that *sent* your USDT to an address you didn't control, then yes, it's been transferred. What you want to look for on the blockchain explorer are two things: first, the transaction where your USDT moved out; second, where it went. If it went to a known exchange wallet and was immediately swapped or moved again, chances are slim. If it sits in a wallet, that's one thing, but getting it back is another. Crucially, never approve transactions for third-party apps or unknown sites unless you fully understand what you're signing. Check the method, the recipient, and the amount *before* confirming on Trust Wallet.

Liam van den Berg · Nijmegen, Netherlandsanswered 13d ago
1

That Revolut pop-up sounds like a total sham. They get you with the fear of your account being compromised. And then asking for a Trust Wallet approval? That's the classic 'connect your wallet and sign a malicious transaction' move. If the USDT left your wallet to another address, that's a direct transfer. Blockchain transactions are final. Revolut can't help with crypto, and Trust Wallet can't undo it. It's gone unless you can somehow trace it and compel the person holding it to return it, which is nearly impossible. File a police report, maybe? But don't expect much.

Xin Ong · Singapore, Singaporeanswered 13d ago
1

Same story, different day. I feel you, man. These fake bank sites and 'urgent verification' scams are everywhere. They're designed to make you panic. The moment they ask you to approve something in your crypto wallet for 'security reasons,' it's game over. You've basically given them the keys. Trust Wallet saying it's irreversible is the hard truth. The USDT is provably on the blockchain at that address they sent it to. I wouldn't waste time with recovery firms unless they're accredited and have a proven track record in *legal* asset recovery, not crypto scams. Most of them are just thieves.

Ethan Mokoena · Cape Town, South Africaanswered 13d ago
2

I was tricked by a fake Coinbase support email once. They made me 'verify' my account by sending a small amount of BTC to an address they provided. It was only like $50 worth, but I was so humiliated. They told me it was for 'anti-fraud measures.' Horrible feeling. I reported it to Coinbase and the police, but yeah, nothing came of it. The advice to never approve transactions based on pop-ups or urgent emails is 100% correct. It's a painful lesson to learn. I hope you can find some peace after this, even if the money is gone.

Olivia Bouchard · Halifax, Canadaanswered 13d ago
2

This is exactly how my cousin lost a bunch of NFTs last month. Fake pop-up, looked like Metamask, asked for a 'transaction verification.' He approved it, and poof, everything gone. He was devastated. He contacted some recovery places advertised online – big mistake. They just wanted upfront fees and never delivered. He ended up reporting it to the local police fraud unit and also filed a report on ChainAbuse, which is supposed to track scam addresses. It didn't get his NFTs back, but they said it helps build a case if enough people report the same scam or address.

Jules Bernard · Lille, Franceanswered 13d ago
3

Phishing via fake financial institution websites is a common vector. The key mistake here, which is understandable given the late hour and convincing fake, was approving a transaction without scrutinizing its purpose and destination within your Trust Wallet. When you authorise a transaction, you're essentially telling the blockchain to move assets. If that authorisation leads to a scammer's address, that's where it goes. Revolut cannot intervene in blockchain transactions, and Trust Wallet, as a non-custodial wallet, cannot reverse them. The USDT is likely transferred to an address controlled by the attacker. To mitigate this in the future: Always double-check the URL you are on before logging in or approving any transaction. Use bookmarks for trusted sites and be wary of unexpected pop-ups or links.

Eva Visser · Almere, Netherlandsanswered 13d ago
3

Man, I've been there. It sucks. I lost some ETH through a fake Uniswap interface once. Thought I was swapping tokens, but it was a malicious contract. The feeling is just awful. Like your stomach drops out. They tell you it's irreversible because it literally is on the blockchain. The only thing I did that felt remotely productive was reporting the scam address to ChainAbuse. It doesn't help immediately, but they maintain a database. Maybe check if that address is listed there already. It's a small comfort, I know.

Niklas Richter · Hannover, Germanyanswered 13d ago
3

This exact type of scam is rampant. They compromise legitimate-looking websites and inject malicious pop-ups, or they send out phishing emails that lead to these fake login/verification pages. The crucial step they exploit is getting you to interact with your crypto wallet – approving a transaction. Once you've signed a transaction that sends your USDT to their address, it's gone. Think of it like sending cash in the mail; once it's sent, you can't get it back unless the recipient wants to return it. Revolut deals with fiat currency, not crypto. Trust Wallet is just the interface. They can't magically retrieve funds sent via a valid, signed transaction. Report the website to your ISP and browser vendor. It's a small step, but it might help prevent someone else from falling for it.

Raphael Moreau · Strasbourg, Franceanswered 13d ago
1

Nope, sorry, if you approved a transaction to send your USDT to another address, it's gone. That Revolut pop-up was just bait. They're good at making them look real. Did you check the transaction hash on a block explorer like Etherscan? See where it went? Usually, these funds are shuffled through multiple wallets very quickly, often ending up at an exchange like Binance or Kraken where they are then converted to another currency. Once it hits a P2P exchange or a mixer, good luck. You can report it to TRM Labs or ChainAbuse, but honestly, it's a long shot for recovery.

Lucas Dubois · Marseille, Franceanswered 13d ago
2

I completely understand the panic. It's terrifying when you see your assets disappear like that. The way these scams work is by tricking you into signing a transaction. They present a fake interface (the Revolut pop-up) and make you authorize an action in your actual wallet (Trust Wallet) that benefits them. If that transaction sent your USDT to a different address, it means you *sent* it, unintentionally. Blockchain transactions are permanent. Revolut can't help because it's crypto, and Trust Wallet can't undo it because the transaction was validly signed by you. It's a harsh reality. Many victims try toChase BitForex impersonators or similar fake recovery services, but these are just more scams.

Mia Wagner · Frankfurt, Germanyanswered 13d ago
2

Feeling sick is totally valid. I got hit last year, not with USDT but with some ETH, via a fake NFT marketplace site. Looked legit, had all the artwork, then BAM. Asked me to 'sign message' which I did, thinking it was fine. Next thing, my ETH was gone. They basically get you to sign a transaction that gives their wallet permission to move your crypto. Or, in your case, to actually *send* it. There's no 'undo' button on the blockchain. Revolut and Trust Wallet are correct. Your USDT is likely in a wallet controlled by the scammer. Reporting to ChainAbuse might help flag the address, but recovery is a pipe dream.

Amelia Jones · Melbourne, Australiaanswered 13d ago
4

That whole Revolut pop-up scenario sounds like a textbook phishing attack, aimed at getting you to execute a malicious transaction. When you're tired or distracted, it's incredibly easy to fall for those convincing-looking prompts. The core issue is that you approved a transaction in Trust Wallet that transferred your USDT out. This is a direct asset movement initiated from your wallet. Unfortunately, blockchain transactions are immutable. Once confirmed, they cannot be reversed by any institution, including exchanges like Binance or Coinbase, unless there's a court order involved, which is highly unlikely for this type of scam. The money is almost certainly gone. Always, always, *always* verify the source and purpose of any transaction request before approving it. If it seems suspicious or unexpected, just close the tab.

Oliver Hughes · Sheffield, United Kingdomanswered 13d ago
2

Oh mate, that's rough. I've heard of these fake bank pop-ups. They're nasty. The bit where it asked for a Trust Wallet approval? That's the trap. They get you to sign a transaction that moves your funds. Revolut support is right, they can't do anything with crypto. And Trust Wallet can't reverse it because it happened on the blockchain. It's probably gone. Don't feel too bad, though. These scammers are getting *so* good at looking legitimate. It's a really tough environment out there. Just try and learn from it and be super careful going forward.

Marie Wagner · Dusseldorf, Germanyanswered 13d ago
12

I'm so sorry this happened. That pop-up sounds like a classic phishing scam, disguised as a security alert. They prey on urgency. When they ask for approval on your wallet for 'verification' or 'security' it's a massive red flag. Real banks or exchanges don't operate like that with your crypto. Unfortunately, once a transaction is confirmed on the blockchain, it's pretty much irreversible. The USDT has been sent to the scammer's wallet and they've likely already moved it, possibly through an exchange like Binance or maybe broken it up into smaller amounts. The best you can do now is report it. Try filing a report with ChainAbuse, they track these kinds of scams and can flag wallets. Also, check if your local police force has a cybercrime unit.

Lauren Brown · Los Angeles, USAanswered 13d ago
7

Ugh, been there. Almost lost some ETH last year the same way. Mine was a fake email, not a pop-up, but the pressure to 'verify' was intense. Clicked a link, entered my details... then had to frantically cancel a transfer request in my wallet. Dodged a bullet, but my heart was pounding for hours. Support was useless, just like you said. They look at crypto as separate from their fiat services. Lesson learned, the hard way. Now I triple-check every single link, and if anything feels off, I close EVERYTHING down and start my browser fresh. Never trust a pop-up asking for login or approval.

Lukas Wolf · Munich, Germanyanswered 12d ago
10

This is why you NEVER click on unexpected pop-ups, especially those claiming to be from your bank or financial services. Phishing is rampant and getting more sophisticated. They mimic brands like Revolut perfectly. That 'transaction approval' was the key moment — they tricked you into signing a transaction that sent YOUR crypto to THEIR wallet. Trust Wallet itself is secure, but the scam happened because you authorized the malicious contract. Please, everyone reading this, be extremely careful. If you get a suspicious alert, go directly to the official app or website, never through a link or pop-up.

Amelia Morin · Quebec City, Canadaanswered 12d ago
2

My stomach just dropped reading this. I'm in a similar boat, though mine was a fake NFT minting site I found on Twitter. Lost about 10k worth of ETH. Felt like a right idiot. The scammers were so convincing. They even had fake testimonials on their site. Revolut support was a no-go for me too, and my hardware wallet provider just shrugged. It's been weeks and nothing. I've reported it to IC3 but haven't heard back yet. It's just... gone. The feeling of helplessness is the worst part. Anyone had luck with any recovery services? I'm wary after seeing some about Funds Recovery Group being scams themselves.

Omar Khan · Abu Dhabi, UAEanswered 12d ago
8

Warning to everyone! This is a very common attack vector now. They spoof legit company interfaces like Revolut to get you to authorize malicious smart contract interactions on your wallet. The crucial step is you approving a transaction. Trust Wallet can't undo what you agreed to on the blockchain. The money is gone. Do NOT trust any unsolicited messages, especially those creating a sense of urgency. Always go directly to the source: open your bank app, log in to your exchange, navigate to their official site yourself. Never click embedded links or buttons. Your digital safety depends on vigilance.

Samuel Lee · Singapore, Singaporeanswered 12d ago
15

This is heartbreaking to read, and I echo the sentiments of others here. That fake Revolut pop-up is a textbook example of a 'contract approval scam' or a 'token drainer' scam. By approving that transaction, you effectively gave the scammer permission to move your USDT from your Trust Wallet to theirs. The irreversible nature of blockchain is both its strength and, in cases like this, its cruelest aspect. Your USDT is likely already laundered through mixers or moved to an exchange with lax KYC, possibly Binance.

What you can do NOW:

  • Document Everything: Get screenshots of the pop-up, the fake URL, the wallet address that received your USDT, and any communication with Revolut/Trust Wallet.
  • Report to Blockchain Analytics: Use services like TRM Labs or etherscan.io to trace the USDT's movement. It might be flagged.
  • Notify Law Enforcement: File a report with your local police's cybercrime division.
Daan Janssen · Rotterdam, Netherlandsanswered 12d ago
4

Oh mate, that's rough. I had a scare on my Coinbase account last month. Got an email saying my account was locked, looked dead real. Nearly clicked the link but my wife walked past and she’s pretty savvy with this stuff. She pointed out the sender email address was slightly off. We didn't click it and rang Coinbase directly. They confirmed it was a phishing attempt. We were lucky. Yours sounds like it went a step further, that approval bit. That's the killer. Support from the crypto platforms is usually non-existent for this type of thing because it's on-chain. It's a horrible feeling, I know.

Charlie Taylor · Hobart, Australiaanswered 12d ago
9

Wow, that pop-up trick... I actually saw something similar mentioned on a crypto security forum a few months back. It was described as a 'fake dapp connector' or something. They make it look like a normal security prompt from your wallet app or bank, but it's secretly asking you to sign a transaction that gives THEM control over your funds. I was using my phone for a bit of DeFi and got a weird notification that looked like it was from my provider – thankfully i'd just read about this and immediately ignored it and force-closed the app. Trust wallet itself is safe but its the outside interactions that are dangerous. Stick to using official links and bookmark your trusted sites.

Lea Laurent · Toulouse, Franceanswered 12d ago

Your answer

You'll be asked to sign in to post.