tronorb.com

The TRON Multisig Scam: “Free” USDT That Steals Your TRX

Someone shares a recovery phrase for a wallet full of USDT? It’s the TRON multisig scam. How it works, how to spot it and how to check permissions.

· 1 min read · TronOrb team

The TRON multisig scam starts with someone "accidentally" sharing a recovery phrase for a wallet full of USDT. It looks like free money. It's a trap designed to take your TRX.

How it works

  1. In a chat, comment or DM, a stranger posts a recovery phrase — "I can't figure out how to withdraw, can you help?" — or it's simply "leaked".
  2. You import it and see thousands of USDT.
  3. You try to send the USDT out, but the wallet has no TRX for fees. So you send some TRX to it.
  4. The transfer still fails. The account's permissions were changed with TRON's multi-signature feature: the recovery phrase you have can't authorise transfers — only the scammer's key can.
  5. The TRX you sent is swept out by a bot within seconds.

The USDT was never available to you. Your TRX was the target.

How to recognise it

  • Any recovery phrase or private key shared publicly or "by mistake".
  • A wallet with a large USDT balance but no TRX.
  • Offers to "split" the funds if you help withdraw them.

Check for yourself (without sending anything)

Open the address on TRONSCAN and look at its permissions: if the owner or active permission points to another address or needs multiple signatures, you can't move anything. You can also paste the address into our address check.

If you already sent TRX

It's gone — TRON transactions can't be reversed. Don't send more "to unlock" it, and don't trust anyone offering to recover it.

The rule

A recovery phrase you didn't create yourself is never your wallet. Legitimate people never share theirs, and nobody needs yours.