Trezor Fake Iphone App James Fajcz

Notice: This page is a freshly imported case study from the original repository. The original content was in a different format, and may not have relevant information for all sections. Please help restructure the content by moving information from the 'About' and 'General Prevention' sections to other sections, and add any missing information or sources you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

Trezor

Trezor did now have any IPhone version of their application. A scammer created a fake IPhone Trezor application. This was downloaded and requested the sensistive information, presumably the seed phrase. Once provided, all balances on the wallet were stolen. The app has since been removed. It is unclear if any funds were recovered.

This is a global/international case not involving a specific country.

About Trezor

"The safe place for your coins." "Store your coins with Trezor." "Hardware wallet is the safest way to manage & trade your cryptocurrencies."

"Apple touts its store as “the world’s most trusted marketplace for apps.” Speaking to the Washington Post, a spokesperson for Apple explained that all apps undergo a rigorous review process—but acknowledged that there have been other cryptocurrency scams on the App Store." "Apple bills its App Store as “the world’s most trusted marketplace for apps,” where every submission is scanned and reviewed, ensuring they are safe, secure, useful and unique."

“User trust is at the foundation of why we created the App Store, and we have only deepened that commitment in the years since,” said Apple spokesperson Fred Sainz. “Study after study has shown that the App Store is the most secure app marketplace in the world, and we are constantly at work to maintain that standard and to further strengthen the App Store’s protections. In the limited instances when criminals defraud our users, we take swift action against these actors as well as to prevent similar violations in the future.”

"James Fajcz, a reliability engineer at a paper company, lives in Savannah, Ga." "In December, as he saw prices of the digital tokens rising, he purchased about $14,000 worth of Ethereum and bitcoin on Coinbase and Binance with money from his savings."

"He wanted to make sure his investment was secure, so he purchased a Trezor Model T hardware wallet and downloaded an app on his iPhone called Trezor, which asked for his seed phrase. The app didn’t connect to his Trezor wallet, and he figured it didn’t work." "Although Trezor does not currently support Apple's iOS mobile operating system and does not have a mobile app, [an] app used the company's name and branding, and had a user rating of nearly five stars—making it appear trustworthy."

"Trezor — which manufactures very-secure hardware wallets — doesn’t actually have an app, so when the holder entered the seed recovery phrase for his wallet, he was unwittingly handing the keys to his bitcoin over to the peddlers of a fake application." "Fajcz were duped by an app pretending to belong to @Trezor, which says it's been trying to get Apple and Google to stop these apps "for years.""

"Weeks later, he purchased more Ethereum on Coinbase. He plugged in his Trezor device, but nothing was there. He went on the Trezor support forum on Reddit for answers. A Reddit poster informed him: There is no Trezor app." “My jaw dropped to the floor. My heart sank,” he said. “I realized what I did.”

"Fajcz said he called Apple’s support line. An Apple representative said the company was not responsible, Fajcz says." “This was a trusted app on the App Store claiming to be the best and most trusted app store on any system anywhere,” he said. “And this nefarious app gets on the platform? I feel Apple should be held partially or fully responsible for that.”

"[I]n fact, it’s easy for scammers to circumvent Apple’s rules, according to experts. Criminal app developers can break Apple’s rules by submitting seemingly innocuous apps for approval and then transforming them into phishing apps that trick people into giving up their information, according to Apple. When Apple finds out, it removes the apps and bans the developers, the company says. But it’s too late for the people who fell for the scam."

"James Fajcz lost $14,000 worth of Bitcoin and Ethereum to the fake app."

"Apple agreed that there have been other crypto scams on the App Store previously but would not say how many. The iPhone maker did not comment on whether fake Trezor apps have sneaked into the App Store in the past, or whether new apps going by the name ‘Trezor’ will get flagged as possibly fraudulent in the future."

"The fake Trezor application appears to have got through the app store via a bait-and-switch, according to Apple. Although it was known as Trezor and used the Trezor logo and color themes, it presented itself as a “cryptography” app. It was designed to encrypt iPhone files and store passwords, as explained by Apple."

"Developers of the fake app told reviewers that it “is not involved in any cryptocurrency.” Apple approved this app and it went live in the App Store on January 22, based on mobile analytics firm Sensor Tower."

"This Trezor cryptography app sometime later changed itself into a crypto wallet. Apple prohibits such changes but it does not know when they occur. It mainly relies on clients and users to report it when such incidents happen."

"Apple avoided naming the developer of the fake Trezor app or offer the developer’s contact details. the company also did not say whether it was turning over the name to law enforcement or whether it managed to investigate the developer further. Moreover, Apple did not say whether the developer had developed any other apps in the past or had any connections to other developer accounts under pseudo names."

"A UK-based firm that specializes in crypto regulations and conducts many fraud investigations, Coinfirm, said that it has got at least 7,000 inquiries about stolen crypto assets since October 2019. The company’s chief information officer, Pawel Aleksander, said that fake apps in Apple’s App Store and Google’s Android Play Store are common." "@Coinfirm_io investigates these things. They found people lost $1.6 million to the iOS scam alone."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

• Known history of when and how the service was started.
• What problems does the company or service claim to solve?
• What marketing materials were used by the firm or business?
• Audits performed, and excerpts that may have been included.
• Business registration documents shown (fake or legitimate).
• How were people recruited to participate?
• Public warnings and announcements prior to the event.

Don't Include:

• Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
• Anything that wasn't reasonably knowable at the time of the event.

There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

• When the service was actually started (if different than the "official story").
• Who actually ran a service and their own personal history.
• How the service was structured behind the scenes. (For example, there was no "trading bot".)
• Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.

Key Event Timeline - Trezor Fake Iphone App James Fajcz

Date	Event	Description
December 15th, 2020	Main Event	Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.

Technical Details

This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

Total Amount Lost

The total amount lost has been estimated at $14,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

Immediate Reactions

How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

Ultimate Outcome

What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

What parts of this case are still remaining to be concluded?

General Prevention Policies

There is no reason to ever enter a seed phrase into an application. All hardware wallets on the market establish that any phrase should be entered into the hardware wallet hardware itself.

Always check and visit the official website of a service. The majority of funds should be stored offline and not on a live wallet application. When setting up a new wallet or upgrading wallet software, never enter your pass phrase or send any funds without first transferring a smaller amount.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.