Star Tower Chain
Star Tower Chain
Star Tower Chain
  • StarTower
  • basic knowledge
    • What is blockchain
    • What is a decentralized wallet
    • What are private keys, mnemonic words, and passwords?
    • What is the miner's fee?
    • What is DeFi
    • What is DEX
    • What is a keystore
    • What is a hardware wallet
    • What is a cold wallet?
    • What is a hot wallet?
    • What is an observation wallet
    • What is a multi-signature wallet?
    • What is a plug-in wallet?
    • What is Passphrase?
  • Safety Knowledge
    • Common fraud cases
      • Beware of custom RPC node scams
      • Stay away from fake links and wallet scams
      • Beware of fake customer service wallet verification scams
      • Beware of SMS sharing fake wallet scams
      • Beware of TRON malicious permission change scams
      • Beware of "zero amount" transfer scams
      • Beware of precise fake addresses
      • Beware of receiving code fraud
      • Beware of new airdrop scams
      • Beware of Mnemonic Phrase Sharing Scams
      • BSC chain malicious authorization fraud
      • Fake Airdrop Scam
      • Fake QR code scam
      • Fake link/App scam
      • Phishing scam
      • Fake Token Scams
      • Fake customer service scam
      • Dapp authorization scam
  • Safety measures
    • How to use revoke.cash authorization management tool
    • Precautions for using third-party DApps
    • Guidelines for using the token contract security detection tool
    • Please keep your private key/mnemonic safe!
    • Please be careful with tokens or website links marked as risky
    • A text to distinguish whether the StarTower wallet is genuine
    • Official website genuine wallet verification method
    • Authorization (Approve) is explained in detail!
    • How to view/cancel malicious Approve (authorization)?
    • Asset loss prevention
    • Asset theft prevention
    • MEV protection function tutorial
    • Fake wallet solution
    • Safety Operation Guidelines
    • Precautions for using third-party DApps
  • Wallet FAQ
  • BTC Wallet
    • Adding/transferring/trading runes
    • What is Runes Protocol
    • What is a Bitcoin ETF?
    • A quick overview of Bitcoin, Lightning Network, Nostr, Nostr Assets Protocol, and Taproot Assets Pro
    • Use StarTower Wallet to transfer BRC-20, one step faster
    • How to use BTC acceleration function
    • View and send Ordinals in your wallet
    • What is a Partially Signed Bitcoin Transaction (PSBT)
    • What are Bitcoin Ordinals
    • What is BTC network congestion and how to solve it.
    • What is Observer Wallet
    • What is the change address?
    • What is the UTXO model?
    • What is OP_RETURN?
    • What is a path
    • What is Taproot?
    • What is Segregated Witness
  • Group 1
    • About RBF and CPFP
Powered by GitBook
On this page
  1. Safety Knowledge
  2. Common fraud cases

Beware of Mnemonic Phrase Sharing Scams

PreviousBeware of new airdrop scamsNextBSC chain malicious authorization fraud

Last updated 6 months ago

Recently, many people in the community have reported that their TRON wallets encountered errors when transferring money. After comparison, we found that they have some common reasons. After in-depth understanding, they obtained the public private key or mnemonic phrase from the Internet. After the user imported the TRON wallet, they could see more or less assets they held. After transferring TRX, they would encounter errors when transferring money. No matter what kind of token was transferred, an error would be reported. The following will explain the nature of this scam, which we call phishing wallets.

Case analysis:

1. Use the public private key or mnemonic phrase to import into the wallet. If the Gas (mining fee) is enough, choose a transfer such as USDT, fill in the payment address, set the amount, and a bunch of prompts will appear after entering the password to transfer. Code error message.

2、Click on the payment address, record this address will be used later, open the tron memory block chain browser: https://tronscan.io/#Fill in the payment address for inquiry

In [Account Permissions], you can see that both owner and active permissions are for the same address, but this address is different from the wallet's payment address. This clearly explains why all imported assets cannot be transferred.

Here is a brief explanation. The TRON public chain integrates some features of Ethereum and EOS, so its permission settings are basically the same as EOS, divided into owner, active, weight, threshold, etc. For specific function descriptions and operations, please refer to the official multi-signature description document:

Here I would like to remind everyone again that there is no free lunch in the world. This scam of defrauding Gas (mining fee) is a relatively early scam. Users will lose some transaction fees at most, but if they encounter [malicious authorization] or [contract call theft of coins], the loss will be relatively large.

https://cn.developers.tron.network/docs/multi-signature