Wallet drained after connecting to a 'Cloud Mining' DApp on my Trust Wallet – any hope?

asked 1d ago0 views38 answers
0

Guys, I'm feeling sick about this. I was on YouTube, probably late at night, and saw an ad for some 'cloud mining' DApp that promised crazy daily returns, like 2% a day. I followed the link, it looked pretty legit, like similar defi sites I'd seen. It asked me to connect my Trust Wallet, which I did, without a second thought, tbh. I put in about 900 USD worth of TRX and USDT. It showed up in the DApp dashboard, everything looked fine for a couple of days, even saw some 'rewards' accumulate. But then today, I tried to check it, and my Trust Wallet balance was zero. Completely wiped out. Not just the mining funds, but my other coins too. Did I sign some malicious contract? Is there anything at all I can do? I'm in Al Ain, so not many local resources.

Mentioned in this discussion
Trust Wallet· neutral

38 Answers

47

This is a classic 'wallet drainer' or 'approval scam,' Yusuf. What typically happens is the malicious DApp, when you connect your Trust Wallet, prompts you to sign a transaction that isn't just about connecting. It's often an approve function for a token (like USDT or TRX) with an extremely high, sometimes unlimited, spending allowance for the scammer's address. Once you sign that, the scammer can pull those tokens from your wallet anytime they want. The 'rewards' you saw accumulating were just a visual trick on their website to lull you into a false sense of security before they drained everything.

Recovery here is virtually impossible because you *authorized* the transaction, even if unknowingly. It's not a hack in the traditional sense, but an exploitation of a legitimate smart contract function. Law enforcement might be able to trace funds using tools like TRM Labs or Chainalysis if the amount is substantial enough and they have the resources, but getting your money back is a very, very long shot. For future reference, always review what permissions you're granting when interacting with DApps, and if something asks for 'unlimited' approval, run far away.

Megan Jones · Atlanta, USAanswered 1d ago
37

Ugh, this absolutely stings, Yusuf. I'm so sorry you're going through this. What you've described sounds like a classic wallet drainer scam, often disguised as high-yield DApps or 'cloud mining' platforms. When you connected your Trust Wallet and 'approved' certain transactions, you likely granted the malicious smart contract permission to access and transfer your assets without further approval for specific token types (like USDT, TRX, etc.). This is different from just sending funds directly. They exploit the approval mechanism.

Unfortunately, once these permissions are granted and the funds are moved off your wallet, especially to addresses controlled by scammers, recovery is incredibly difficult, if not impossible. Blockchain transactions are irreversible. Your best bet for official reporting is to file a report with the appropriate authorities. In the UAE, you might want to look into the Economic Crimes Department or similar federal police units. Also, report it to the platform where you saw the ad (YouTube) and Trust Wallet support, though they can't reverse transactions, they might be able to help block further scam activity. Be extremely wary of anyone online now claiming they can 'recover' your funds for a fee – those are almost always recovery scams.

Niamh Burke · Cork, Irelandanswered 1d ago
21

Man, this sucks big time, I really feel for ya. It's so easy to fall for these things when they promise such good returns, especially when they look legit on the surface. That feeling of seeing your balance wiped out is just gut-wrenching. You're not alone, loads of people have been caught by these DApp scams. They make it seem like you're just connecting to a service, but you're actually giving them keys to your crypto kingdom. Keep your head up, mate. It's a hard lesson, but you've learned to be super careful with what you connect your wallet to now. Always double and triple check permissions and what you're actually approving.

Jack Harris · Melbourne, Australiaanswered 1d ago
12

Honestly, 2% a day should have been the first red flag, my friend. No legitimate investment offers those kinds of returns, especially not in crypto where volatility is already high. It's basic math; that's 730% a year. Any 'cloud mining' DApp advertising that is almost certainly a scam. Think about it, if it was real, why would they need your money? They'd be the richest people on earth already. With crypto, if it sounds too good to be true, it absolutely is. Your funds are likely gone. It's a harsh truth, but it's important to be realistic about it. Sorry for your loss.

Ahmed Al Falasi · Dubai, UAEanswered 1d ago
8

Yeah, 2% daily? Seriously? That's just asking to be scammed. It's like those email scams from Nigerian princes, but with crypto. People just see the potential returns and switch off their brains. Sorry to be blunt, but this is why people lose money. Common sense goes out the window. Your funds are gone, buddy. Learn from it and move on. These platforms prey on greed.

Eva van Dijk · Breda, Netherlandsanswered 1d ago
31

Yusuf, I am genuinely so sorry this happened to you. It's a horrible feeling, and these scammers are incredibly sophisticated in how they target people. You're right, it's very likely you signed a malicious smart contract allowing them to transfer your funds. This is a common tactic, and it's almost impossible to differentiate from legitimate DApps if you don't know exactly what you're looking for under the hood.

My advice for anyone reading this: NEVER connect your primary wallet with significant funds to experimental DApps, especially those advertised with unrealistic returns. Use a secondary 'burner' wallet for anything you're unsure about, and only put in minimal amounts you're prepared to lose. Also, learn how to revoke token approvals. Sites like Etherscan and BscScan allow you to check and revoke approvals you've granted. While this won't recover your already stolen funds, it's a crucial step to prevent future drains if you still had unapproved tokens. Be extremely cautious of any 'recovery services' now messaging you; they're almost always scams.

Emma Khumalo · Johannesburg, South Africaanswered 1d ago
28

This is unfortunately a very real and prevalent scam, Yusuf. You connected your Trust Wallet to a fake DApp and, most likely, unknowingly authorized a 'token approval' that gave them permission to move your assets. This is why not just the initial 'investment' but your other coins were also drained. It's not a hack through your wallet's seed phrase, but an exploitation of the legitimate smart contract interaction mechanism for token allowances.

For anyone else reading: in decentralized finance (DeFi), you often grant smart contracts permission to spend your tokens on your behalf (e.g., for swapping, staking, or providing liquidity). Scammers create fake DApps that ask for excessively broad or unlimited permissions, then drain your wallet through that permission. Always, always check the contract address you're interacting with and the specific permissions being requested *before* confirming any transaction. If you see 'unlimited' approval for a token, be extremely cautious. This is a very common method for phishing and scamming in the crypto space.

Felix Schroder · Dusseldorf, Germanyanswered 1d ago
17

Oh man, this brings back bad memories. Something really similar happened to me last year, but it was with a fake staking site. Thought I was being so smart, getting those juicy returns. Connected my MetaMask and poof, my ETH was gone within an hour. The feeling is like a punch to the gut, completely helpless. I reported it to the FBI's IC3, but knew deep down it was a long shot. Never heard anything back, exactly what I expected. It's a tough lesson, probably the most expensive one I've ever learned about crypto. Just gotta be super, super careful now.

Christopher Martinez · Austin, USAanswered 1d ago
13

It's awful to read this, Yusuf. I lost a substantial amount too, not to a mining DApp but a fake crypto exchange that looked just like a real one. It said 'approved' on my transaction history and everything. You just feel so stupid afterwards for trusting something that seemed plausible. The shame makes you want to hide under a rock. I reported it to Action Fraud here in the UK and my bank, but they both said there was nothing they could do as crypto transactions are irreversible. It's a horrible situation to be in, and I really hope you find some peace acknowledging it wasn't your fault these criminals are so cunning.

Emily Jones · Cardiff, United Kingdomanswered 1d ago
10

Ugh, this is rough, mate. The whole 'cloud mining DApp promising huge returns' is such a common scam, especially on platforms like YouTube where they can place targeted ads. They make them look so legitimate, it's honestly hard to tell sometimes, even for experienced users. It's called a wallet drainer scam because you give them permission to 'spend' your tokens from your wallet, not necessarily send everything directly in one go. They just wait for you to load up more, then zap it again. The funds are pretty much gone once they've taken them. All you can really do is alert the authorities and everyone you know so they don't fall for the same trap. So sorry for your loss.

Mia Taylor · Brisbane, Australiaanswered 1d ago
3

Yeah, you def signed a malicious contract. The "connect wallet" step is where they get you. Once you approve a token allowance or a smart contract interaction, they can drain whatever is linked to that address. Happened to a friend of mine. The TRX and USDT were likely the bait, then they swept the rest of your holdings. There's little recourse once the tokens are moved into their wallets, which are usually burned or sent through mixers.

Mia Schneider · Berlin, Germanyanswered 1d ago
3

Oh no. I know that gut-wrenching feeling. I lost about 700 Gbp to a similar thing last year. Thought I was being smart with some 'NFT staking'. They drained my ETH. It felt like a punch to the stomach, I was crying in the kitchen. My husband was furious. So sorry this happened to you. There's very little you can do once they have control. Stick with ChainAbuse.com for scam info.

Aoife Sullivan · Cork, Irelandanswered 1d ago
1

900 bucks + other coins too? Ouch. Sounds like you clicked on an ad. These things are rampant. You connect your wallet, it looks good for a bit, then *poof*. These 'cloud mining' DApps are almost always scams. They prey on the greed... that 2% a day is way too good to be true. NGL, I'm surprised people still fall for this.

Daniel Martin · San Antonio, USAanswered 1d ago
2

I'm so sorry to hear this! The crypto world can be tough, especially when you're trying to explore new opportunities. YouTube ads are often unchecked, so it's easy to get caught out. Don't beat yourself up too much, many have been in your shoes. Hopefully, you can learn from this and move forward safely.

Hui Tan · Singapore, Singaporeanswered 1d ago
1

This is becoming very common. The quick returns are fake. They want you to connect your wallet and approve transactions. Once approved, they can take whatever they want. Your wallet is like your bank for crypto, you don't just connect it to any random website, especially not ones promising huge profits. They look legit but are stealing from you.

Hassan Al Falasi · Ajman, UAEanswered 1d ago
5

You absolutely signed a malicious contract. That 'connect wallet' prompt is often a disguised approval for unlimited token spending or smart contract access. They lure you in with fake gains, then execute a script to drain your wallet. The TRX and USDT were likely just the initial targets. The fact that it spread to other coins is typical of a full drain script. I'd recommend checking your wallet's token approval list and revoking access to that DApp immediately. Some sites help with this, but honestly, once it's approved, recovery is near impossible. Report it to ChainAbuse.org – they track these scam sites.

Sem Bos · The Hague, Netherlandsanswered 1d ago
2

This is exactly what happened to me a few months ago. I lost about $400 worth of SOL and BNB. It was a trading bot 'opportunity'. Like you, I was exploring, saw an ad, and thought it looked real. Connected my wallet, saw the fake profits, and then one morning... gone. They took everything. I felt so stupid, so exposed. There really isn't anything you can do. Just gotta learn the hard way.

Brian Wilson · Austin, USAanswered 1d ago
2

Oh man, that's rough. It's so easy to get lured in by the promise of easy money. Those DApp interfaces can look super convincing. Don't feel too bad, a lot of people have fallen for similar scams. The most important thing now is to secure your other wallets and be extra careful about what you connect to. Stay strong!

Milan Janssen · Utrecht, Netherlandsanswered 1d ago
4

I've been there. Lost my entire ETH balance on a fake NFT minting site advertised on Reddit, of all places. It was late, I'd had a glass of wine, and thought I was grabbing a cheap mint. Connected my MetaMask, approved the transaction, and then it just vanished. It took me weeks to even talk about it. You're not alone in this. It's a horrible lesson. I'd check your wallet's permissions online, see if you can revoke that DApp's access.

Isabella Morin · Victoria, Canadaanswered 1d ago
3

Eeish, that's a terrible shock. I also fell for a staking scam last year that cost me a few hundred Rand. I was so excited about the potential returns, it blinded me. Once I connected my wallet to their site, they were able to access my other tokens too. It's like a trapdoor. Reporting helped me feel a tiny bit better, though. I filed a report with the relevant crypto crime unit in South Africa, even if it leads nowhere, it's good to get it on record.

Lily Mokoena · Port Elizabeth, South Africaanswered 1d ago
1

YouTube ads are a breeding ground for crypto scams. They get accounts that look legit, buy ads, and push these fake DApps. The 'connect wallet' function is the primary attack vector. They add a smart contract that allows them to transfer tokens from your wallet to theirs. It's not magic, it's just code they exploit. Always check the contract address and URL carefully. If it's too good to be true, it's almost certainly a scam.

Sarah Nel · Bloemfontein, South Africaanswered 1d ago
6

This is unfortunately a very common 'rug pull' or 'drainer' scam. The DApp is just a front. When you connected your wallet, you likely approved a transaction that gave the DApp's smart contract permission to move tokens from your address. The key is that they often ask for unlimited approval, meaning they can take any token you hold. The best practice after any such incident is to immediately go to your wallet's settings (or use a DApp scanner like Revoke.cash) and revoke all token approvals, especially for any unknown or suspicious DApps. This stops them from accessing any further tokens. Recovery of what's already gone is highly unlikely.

Michael Bauer · Cologne, Germanyanswered 1d ago
3

Oh no, this is heartbreaking. I lost my savings to a crypto scam last year as well. It was a 'guaranteed' investment platform I found on Instagram. I connected my wallet, and they took everything. The shame and helplessness are overwhelming. I cried for days. My partner looked at me and just said, 'You have to be more careful, Sophie.' It's a hard lesson, but please know you're not alone. Don't trust any DApp that asks for wallet connection without thorough research.

Sophie Neumann · Hannover, Germanyanswered 0d ago
2

Man, that sucks. Similar thing happened to me. I fell for a fake MetaMask airdrop advertised on Twitter. Looked super legit, had the right logo, everything. Connected my wallet, thinking I was getting free tokens. Next thing I know, my entire wallet is empty. Lost about $600. It was devastating. I reported it to the platform where I saw the ad, but they didn't do anything. It's a cold, hard lesson.

Tyler Davis · Portland, USAanswered 0d ago
3

I lost my monthly salary to a similar DApp about 6 months ago. It was advertised on TikTok. I saw the promise of doubling my money in a week. Connected my Trust Wallet, put in some BNB. It looked like it was working, then gone. I reported it to my bank, but they couldn't do anything since it was crypto. I contacted ChainAbuse.org, and they gave me some advice, but honestly, the money was gone. I learned to be super suspicious now.

Chloe Pillay · East London, South Africaanswered 0d ago
2

Oh dear, that's a terrible experience. It's really unfortunate that these types of scams are so prevalent, especially targeting people through platforms like YouTube. The 'connect wallet' is the critical step where you grant permissions. Many people don't realize the extent of what they're approving. Hopefully, this experience, though painful, will make you even more cautious in the future. Stay resilient!

Mohammed Al Mansoori · Ajman, UAEanswered 0d ago
2

I feel for you, mate. I lost about 200 AUD to a fake crypto giveaway on Facebook. They had a cloned website. Connected my wallet, thought I was getting free Bitcoin. Boom, gone. My wife told me to be more careful. These scams are everywhere. Don't let it get you down too much, learn from it and move on. Better safe than sorry next time.

Thomas Jones · Newcastle, Australiaanswered 0d ago
1

The ad on YouTube is the biggest red flag. If it seems too good to be true (2% daily?!) and you found it via an unsolicited ad, it's a scam 99.9% of the time. Connecting your wallet is the point of no return for these DApp drainers. They use smart contracts to steal funds once you grant permission. Always, *always* double-check the URL and search for reviews *before* connecting any wallet. Even then, be super conservative.

Hannah Khumalo · Bloemfontein, South Africaanswered 0d ago
4

This whole story is textbook DApp drainer scam. You clicked an ad, connected your wallet, thus signing a malicious contract that gave them permissions. The fake dashboard and accumulated 'rewards' are just social engineering. They drain wallets using a script that exploits the permissions you granted. It's a common tactic. Don't put all your crypto in one wallet accessible by many DApps. Consider using a hardware wallet or a separate 'hot' wallet for DApp interactions. Reporting to ChainAbuse is a good start, though recovery is unlikely.

Andrew Gonzalez · San Antonio, USAanswered 0d ago
5

Ugh, this is brutal. The same thing happened to me with a 'DeFi yield farm' I saw on Twitter. A shiny interface, promises of huge APY. I connected my Trust Wallet. Within hours, my wallet was drained. $1500 gone. I felt so foolish. My spouse told me I was being too trusting. There's almost nothing that can be done because the funds are already moved and mixed. The best advice is to immediately revoke access to that DApp within your Trust Wallet settings. Go to Settings > DApp Browser > [Scam DApp Name] > Revoke. It won't get your money back, but it prevents them from taking more.

Charlotte Ouellet · Calgary, Canadaanswered 0d ago
6

Oof, that's a classic scam pattern you've run into. Those YouTube ads and 'guaranteed high returns' are red flags 99% of the time with crypto. Connecting your wallet to untrusted DApps, especially ones you find via ads, means you likely approved a token-spending or token-transferring smart contract. When you connected, you gave it permission to move assets. The TRX and USDT are likely gone, swapped for another token and sent to the scammer's wallet. Sometimes they even have gas tokens to drain everything.

Your best bet is to analyze the transaction where you connected your wallet. Look at the exact permissions you granted. Trust Wallet itself has features for this, or you can check on a block explorer like Tronscan for your TRX address. If you see a broad transfer or approve function that you can't recall authorizing for specific reasons (like a swap or a stake), that's your smoking gun.

Ngl, recovering funds lost this way is EXTREMELY difficult. The money is usually mixed or laundered through multiple wallets and exchanges almost instantly. Reporting to ChainAbuse is a good step, though. They track these scams and might be able to link the wallet addresses, even if it doesn't get your money back.

Levi Meijer · Tilburg, Netherlandsanswered 0d ago
10

I feel this in my bones. Had something similar happen last year, though not quite as much. Thought I was being clever with a staking site. Connect wallet, deposit funds, see returns… then poof. Gone. Wiped my ETH wallet clean, too. It's like a punch to the gut, made me not want to touch crypto for months. I lost about 300 USD worth of MATIC and some ETH.

I spent weeks trying to track the wallet addresses, even contacted some recovery outfits. Total waste of time and more money. They all wanted upfront fees. Bunch of vultures. The only thing that helped me move on was accepting it was a lesson learned, albeit a very expensive one. Now I am SO paranoid about every click. If it looks too good to be true online, it absolutely is. Don't beat yourself up too much, friend. It happens to so many of us.

Amelia Bouchard · Vancouver, Canadaanswered 0d ago
5

🚨🚨 MAJOR WARNING 🚨🚨

This is exactly how these rug pulls work. They lure you in with fake promises, get you to connect your wallet and approve transactions, and then they drain everything. That "2% daily returns" is pure fantasy bait. No legitimate investment consistently offers that without insane risk.

NEVER connect your wallet to a DApp unless you completely understand its purpose, its code (if it's open source), and the specific permissions you are granting. Always check the contract address on a blockchain explorer to see its history and any warnings by the community.

For TRX and USDT, check the TRC-20 blockchain explorer for your wallet address. Look at the outgoing transactions IMMEDIATELY after you connected your wallet and approved something. See where those funds went. That's your thief's wallet. Report it, but don't expect anything back. This is why security is paramount in crypto.

Lucas Bakker · Almere, Netherlandsanswered 0d ago
7

Oh no, that’s awful! I’m so sorry this happened to you. It’s completely understandable that you’re feeling sick – losing that much money is devastating, and the way it happened is so violating. You’re definitely not alone in falling for these kinds of scams; they’re getting incredibly sophisticated.

It sounds like you likely approved a malicious contract. It’s happened to friends of mine too, they just felt absolutely gutted. One friend had her entire collection of NFTs stolen this way after visiting a fake minting site. It’s a harsh lesson, but please try not to blame yourself too much. Focusing on what you can learn from this is the most important thing now. Maybe it stops someone else from going through this.

Isla Martin · Hobart, Australiaanswered 0d ago
8

Yeah, your wallet is likely drained permanently. That setup you described – the YouTube ad, the 'cloud mining' DApp, high APY promises – is a textbook phishing scam. They get you to connect your wallet, and then you usually sign a transaction that gives their smart contract broad permission to transfer tokens out of your wallet. They don't need to 'hack' your wallet. You gave them the keys, essentially.

I've seen this happen to friends who were involved with sites promising similar 'risk-free' crypto gains. They lost thousands. Their wallets weren't just drained of the 'invested' funds but also other assets they held.

Practical Tip: Always, always, ALWAYS review the permissions a DApp is asking for before you approve. If it's asking for permission to 'transfer' or 'approve' ANY token, and you're not actively trying to do a specific trade or staking action yourself, disconnect immediately. Many DApps only need approval for specific functions, not a blanket permission. Block explorers are your friend – look up the DApp's contract before connecting.

Grace Hall · Sheffield, United Kingdomanswered 0d ago
6

This sounds eerily familiar to scams that have popped up on other networks before. The strategy is simple: create a convincing front-end DApp that mimics legitimate DeFi platforms, advertise heavily (often on platforms like YouTube where user attention is diverted), and exploit users' greed or FOMO. When you connect your wallet, you're usually signing an approve or transferFrom function, giving the scam contract the ability to spend your tokens. They will then execute that function remotely to sweep your wallet clean.

Unfortunately, once the TRX and USDT (and other coins) are sent from your wallet, they are likely already on their way to an intermediate wallet controlled by the scammers. From there, they are typically broken up and sent through mixers or P2P trades to obscure the trail. Recovering funds that have been moved off-chain this quickly is nearly impossible for the average user.

Your best course of action, though likely futile for recovery, is to report the scam. Utilize platforms like ChainAbuse. They compile lists of known scam addresses and DApps, which might help others avoid the same fate. Look at your transaction history on the Tron network for the initial connection and approval; this will show the malicious contract address. Keep that information handy.

Lina Meyer · Berlin, Germanyanswered 0d ago
4

Wait — did you say YouTube ads? And 'cloud mining'? Dude, those are like the flashing neon signs for crypto scams. I get ads like that ALL the time. If it sounds too good to be true, it's 1000% not true. 2% a day? That's not a real return; that's a Ponzi scheme.

And connecting your Trust Wallet? Tsk tsk. You gave them the keys to the kingdom. Did you check the contract you signed? Doubt it. It probably said something like 'Approve Unlimited Spending' in tiny letters buried in the transaction details. These DApps are designed to look pretty and trick you into signing away your assets.

Honestly, don't expect to see that TRX or USDT again. It's gone. You might as well report it to IC3 or whatever your local equivalent is, but I bet you won't get squat back. Learn from it, I guess. Cold storage for big holdings from now on, and only use DApps I've vetted myself after a TON of research, not from some random ad.

Matthew Anderson · Philadelphia, USAanswered 0d ago
9

Oh man, that feeling… I remember it well. I lost about 500 bucks worth of ETH on a fake NFT minting site a while back. It looked so professional, too. Had all the usual Discord hype, fake celebrity endorsements. Connected my MetaMask, approved the mint, and suddenly my ETH was gone. Just… gone.

Like you, I was devastated. I spent days staring at the transaction history, trying to figure out where it all went. Sent messages into the void on Twitter. Nothing. It’s a brutal lesson, but you learn to be so much more careful. Now, before I even THINK about connecting my wallet, I’ll search the project name + 'scam' or 'rug pull'. If there's even a whisper, I nope right out. It's better to miss out on a potential gain than to lose everything. Keep your chin up, this happens to so many people.

Tess Bos · Breda, Netherlandsanswered 0d ago

Your answer

You'll be asked to sign in to post.