Trezor Phishing Ad and BTCPay Exploit Hit Bitcoin Users: Are Funds Safe?

A Trezor phishing scam promoted through a Google-sponsored ad has reportedly drained one user’s life savings, the victim says. Elsewhere, BTCPay Server shipped an emergency patch for a critical flaw already under active exploitation.

The two incidents landed within roughly 24 hours of each other. Neither touched the Bitcoin (BTC) protocol itself, yet both put user funds at direct risk.

Google Ad Funnels Victims to Trezor Phishing Site The victim, posting on X (Twitter) under the name David, blamed a sponsored search ad on Thursday. Based on the report, the ad placed a counterfeit Trezor page, hosted on Google Sites, above the wallet maker’s real website.

Anyone who typed a recovery seed into the page handed attackers full control of their wallet. Hey @Trezor, just lost my life savings. Top sponsored Google result for 'Trezor wallet' is a phishing site!The scam page (https://t.co/z5s9HaJIu2) is vacuuming up millions.