Crypto

Fake “I’ll buy your USDT” chats that drain wallets

Cold buyers who write “USDT TRX20” and offer cash or bank transfer often want a malicious connect link, not your coins.

A common Telegram opener pretends to purchase tether today — “USDT TRX20”, pay by transfer or cash. Real traders usually say USDT TRC-20 (Tether on Tron; Tether documents the contract as TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t). Typos show up in mass templates too.

The pitch then leaves ordinary peer-to-peer rails. Suddenly there is a “guarantor”, wallet check, AML page, exchange escrow, payment link or QR code. Sometimes the victim sends coins. Sometimes they only connect a wallet and approve a draining transaction. Either way, the “buyer” was never shopping.

Stay on reputable P2P platforms with escrow you understand. Never paste seed phrases, never sign mystery wallet connects for a stranger’s payment page, and reverse-check any TRC-20 contract address on a block explorer before you move size.


If this already cost you money, start at Get help. Anyone selling a guaranteed clawback for an upfront fee: Fake recovery.

This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.

Next step

Were you scammed?

Get help