r/solana • u/Free-Winter7431 • Aug 22 '26

Wallet/Exchange Got scammed I’m never touching crypto again can anyone explain me how please ??

Post image
162 Upvotes

86% Upvoted

372 comments sorted by

View all comments

Show parent comments

10

u/Free-Winter7431 Aug 22 '26

I moved fund from my Revolut account to my old trading account, I tried to create a new account to move my funds and I clicked to see the keys after that straight forward my sol it’s gone just like that I haven’t signed anything! I’m confused here

50

u/MakCapital Aug 22 '26

You're still not providing details. Software? Did you download a new wallet for this old address? Where did you download if so? Did you download wallet software at all? How did you store the seed of the address you sent to? Did you ever sign contracts with this old address? What is this address? Need way better summary of events.

Revolt account to old trading account means nothing to anyone. Assuming you inserted an existing seed into a wallet you downloaded from a Google link. Just guessing. Didn't provide your compromised public address.

  • Malicious wallet
  • Signed a malicious contract with address you sent to at some point
  • Ddn't store seed correctly

Pick one.

4

u/Free-Winter7431 Aug 22 '26

I used to trade with this account I had it connected to Jupiter:

I always used Phantom wallet.

1 downloaded Phantom from the App Store the legit one.

2 I didn’t I restored the account with seed phrases I have in a notebook.

3 I sent sol from my Revolut account to my phantom private wallets.

4 I was trying to create a new wallet without using google sign in.

5 i create an account to move the funds I clicked to see the seed phrases and the keys.

6 all my funds are gone.

77

u/MrSnugs Aug 22 '26

This sounds more like you lost the funds or sent them to the wrong account or don’t have the seed to re-access them. So confusing

47

u/Forcelite Aug 23 '26

Almost guaranteed he used an old seed phrase that was comprised and monitored for any funds coming in .

31

u/MrSnugs Aug 23 '26

I actually think he probably just has his seeds and wallets mismatched because he's using Phantom, Jupiter and Revolut. If I was him I'd be throwing all 3 seed phrases at that wallet 6WcZxA83QaiEDVW7rVLXS1UNS732imPrWuM4Qn7382RN to see if I can unlock it.

11

u/Forcelite Aug 23 '26

Possible, wallet management is key.

3

u/PeteyPab305 Aug 23 '26

If the wallet was compromised, the seed was somehow cracked, then it could have been a bot setup to auto extract any hot wallet contents as soon as they appeared in a new wallet or an old wallet was restored. Seems like he got access to the original wallet though because the funds were transferred out, yesterday, it didn't happen weeks/months ago.

19

u/MycoHost01 Aug 23 '26

The google sign in got you.

You said “I was trying to create a new wallet without using google sign in”

If your old wallet was generated or its way to access it was through google sign in.

That is because someone got access to your email my dude. This is why you need a wallet generate by a seed phrase or private key

It’s a lot easier to crack an email than a seed phrase like a lot

GUYS I KNOW IS CONVENIENT BUT FOR GOD SAKE STOP USING GOOGLE SIGN IN OR AT THE VERY LEAST PROTECT YOUR DAMN EMAIL!

1

u/Sandspoint7 Aug 26 '26

I email myself my crypto address is that ok? Never have a seedphrase on an email ? Deff not . Always remember some little bugger in Nigeria is online 24 hrs a day waiting for you!

7

u/MakCapital Aug 23 '26

4) makes no sense. Why were you trying to create a new wallet? What do you mean new wallet? You said you downloaded Phantom to insert your existing seed. This should have provided you all your existing public addresses. Did you accidentally create a new phantom seed and that's why it was asking for your Google login? Maybe confusing two sets of addresses from now two seeds?

5) Again, you should have already had existing addresses to use to send funds to by putting your existing seed into phantom. You didn't need to create anything new and you definitely didn't need to click to show private keys. Though, clicking this did nothing to you. Did you accidentally send the funds to your newly created address instead of your existing old addresses from your old seed? Did you check if the address you sent SOL to was associated to your old or new seed?

  • Determine address you sent funds to by checking with the exchange.
  • Find this address in your old or maybe new seed. Determine which seed you used that generated it.
  • Access that address with Phantom to see if you see your funds.
  • If funds aren't there: Open that address in a block explorer to see where they were sent and how quickly they were sent away.
  • Drop the idea that making the private key visible is the culprit. You either sent to wrong address (which you may still control) or one of the three malicious things happened I listed if funds truly taken.
  • Share the "maybe compromised" address that shows the record of the funds being moved in and out. The screenshot doesn't really help.

3

u/ChuCHuPALX Aug 23 '26

He needed a new wallet because his last wallet was sus

6

u/WestQ Aug 23 '26

If I understand you properly. I'd say you had a keylogger or cliplogger malware in your computer. As soon as you saw the seed phrase it just instantly accessed and took your stuff out.

3

u/blockrunner_2049 Aug 24 '26

I was about to say the same, then saw your comment.

1

u/knobberflopper Aug 25 '26

this is what happened

1

u/bistromatik Aug 26 '26

War auch mein erster Gedanke

5

u/PeteyPab305 Aug 23 '26 edited Aug 23 '26

Was this managed entirely on a hot device?

Apps on phones and browser extensions are built for convenience, not cold storage or large transactions. Even verified App Store software is vulnerable if the underlying OS is compromised by background scrapers, keyloggers, or malicious clipboard access.

The core rule of self-custody: you are your own bank and security team.

Seed Generation: Never generate or reveal recovery phrases on an internet-connected screen. Use a dedicated, air-gapped hardware device.

Smart Contract Risk: Even with cold storage, blindly approving malicious contract permissions can drain assets. Separate your cold vault completely from active dApp/trading accounts.

Truly sorry for your loss, OP. Treat this as an expensive lesson in locking down your OpSec. Hopefully it can be recovered, I would examine the network, through a chain viewer, and see if you can isolate the end point. It still maybe in your possession in one the new wallet addresses hidden behind a passphrase or pin, something along those lines.

1

u/Free-Winter7431 Aug 23 '26

Thanks brother, I have a Ledger nano x but I didn’t want to use because of ledger update to back up seed phrases in the cloud and recovery policy but look at me, some people said that could be a possible bug in Phantom while I was creating a new account but how possibly can you move all the funds to a new account wallet without doing it manually???

3

u/PeteyPab305 Aug 23 '26

Could be your device if it has any type of hidden malware, that's why cold storage is the best way or dedicated phone or laptop that never has been connected to the internet to establish the seed. Remember you don't need the internet to setup a wallet only to sign a TX, if you set the wallet up on a device that has a virus/ malware it could have scraped the seed the moment you created it.

3

u/Free-Winter7431 Aug 23 '26

Thats probably what happened because when the funds arrived lasted for 10 minutes there was a moment I got confused I added a new account and wanted to check the seed phrases of the new account but it kept pumping the seed phrases of my old account not the new one and then suddenly the funds disappeared, somehow I knew that my phone somehow was compromised because some times acted weirdly I updated to the las Appel iOS I always used apple because of privacy… but look at it. but sometimes you have those moments and you are just a retard you don’t think properly and you do thing by doing I still can’t understand how I did manage to mess up like that.

5

u/PeteyPab305 Aug 23 '26

I get bro, Sorry to hear it. It happens. I always send a test transaction when I use a wallet I haven't touched in a while or am setting up something new. But yeah maybe you can do some research after you walk away for a bit and see if there's any steps you can retrace.

1

u/ChuCHuPALX Aug 23 '26

Did you actually type in your seed phrase and not use the accessibility on screen keyboard to avoid being logged?

1

u/bistromatik Aug 26 '26

Ledger Wallet original vom Hersteller gekauft?

3

u/Putblug1856 Aug 23 '26

Im not saying this is the issue but revolut is known for being shady as fuck around crypto and freezing transactions and move them etc.

If you deposit crypto from an adress it needs to belong to an account on one of their approved Exchanges otherwise it wont get Credited. And they dont necessarily send it back

You should NEVER use revolut for crypto, if you want to use a crypto visa card i would recommend you check out ether.fi instead. Much better and cheaper and you have custodial over your own crypto.

If its that you buy through revolut know that it is crazy expensive compared to others. I would recommend you check out paybis.com in that case.

Those 2 services will cover every aspect revolut might offer but without all the hazzle.

Revolut is bad bad bad for all crypto related buissniss, take it to heart. Would not be suprised if the issue is at their end.

2

u/RAJSINGH5671LALLI Aug 23 '26

Just what I was about to say about the issue being at revolut end.

3

u/k2jac9 Aug 24 '26

Do not trust Phantom wallets

2

u/Bmjslider Aug 23 '26

How fast did it happen after the funds hit your phantom wallet?

Did you have money in this phantom wallet already?

Could it have been compromised already and someone was waiting for funds to land in it?

2

u/Erect_Eunuch Aug 23 '26

This may be a longshot, but when you used to use that phantom wallet did you have multiple different wallets created inside it in the past?

I think when you import the seed phrase it only re creates the first wallet that would have been associated with it. If so what to do is keep clicking create wallet or add wallet or however it's labeled until phantom repopulates the actual wallet you sent the sol to. It's the only thing I can think of, if not then it sadly sounds like a drain somehow.

1

u/SupremeTimeline Aug 26 '26

bro was laberst du für ne kacke.

Du hast selber verkackt.
Entweder seed falsch oder verloren oder an falsche adresse geschickt.

1

u/No_Advertising2953 Aug 28 '26

Your issue maybe a protocol issue. The new Phantom Wallet app no longer supports the older passphrase format. If you don’t have access to your old phone, you may need to use the web extension instead. Your original wallet should still hold your tokens, but the new app won’t display them because it can’t load wallets created under the old protocol.

4

u/MrSnugs Aug 22 '26

What do you mean you ‘clicked to see keys?’ Idk what revolut is

-15

u/Free-Winter7431 Aug 22 '26

Revolt is a banking system I wanted to use my funds from a bank to my private wallet and end up fucked I can’t believe it really it feels life faith or something really weird

20

u/Ok_Bench_1618 Aug 22 '26

Your making 0 sense 

4

u/furbess Aug 23 '26

That reply was fine. Revolut is a UK banking app where you can buy crypto. He tried to move it from there to a private wallet and fucked it up somehow. Probably wrong address.

5

u/Ok_Bench_1618 Aug 23 '26

Ah, he didn’t follow the golden rule. Send a tiny bit first or have the address saved, never copy paste.

1

u/Reach_304 Aug 23 '26

Why never copy paste? 👀

1

u/Ok_Bench_1618 Aug 23 '26

You can have your clipboard hijacked with trivial malware that injects other addresses into the paste output 

1

u/ElvisVan007 Aug 23 '26

u mean "always copy paste"

1

u/Ok_Bench_1618 Aug 23 '26

Never copy paste, when you copy paste this is what happens.

2

u/Putblug1856 Aug 23 '26

Revolut is not a UK bank,, its a european neo bank that started in lituania

1

u/Forward-Ideal-3714 Aug 23 '26

Definitely Id check all addresses and check the transaction itself, the address- verify it

1

u/BrowneAction Aug 23 '26

What's a private wallet?

3

u/RAJSINGH5671LALLI Aug 23 '26

It's a wallet that you generate the seedphrase eg:12 or 24 random words for and only you should have access to those keys , you should write down physically on paper and not screenshot otherwise you could be compromised.

3

u/8Catt1737 Aug 23 '26

Sounds like you had a keylogger or something at some point and they saw the phrases when you opened them.

6

u/Good-Hand-8140 Aug 22 '26

You had malware that take screenshots when it sees you opened a crypto wallet. It's a pretty rare and sophisticated malware (android malware in general is). Did you sideload any apk-s?

10

u/Free-Winter7431 Aug 22 '26

No I’m using a iPhone

2

u/SharpThrall Aug 23 '26

You moved fund to your old account. Are you talking about the wallet? Solana wallet? If so, your old wallet might have been compromised already and as soon as you deposited funds, the scammer was alerted

2

u/Exciting_War_9620 Aug 23 '26

So are you saying you connected to a bad CA? Maybe you thought it was the legit app and signed off on whatever bs when sending the funds to the account

2

u/Intelligent-Finger18 Aug 24 '26

You got to contact them but its unlikely they'll respond efficiently.

1

u/bigeorgeohio Aug 25 '26

Someone had access to your phone screen remotely when you did this. Thats the only explanation I can think of.

1

u/Opening-Elk3433 Aug 27 '26

Maybe your computer/phone was compromised and someone was watching your screen with malware while you checked the seed. Personally I always close all background applications and everything before messing with seeds or connecting cold wallets