Trezor warns of suspected implant in CryptoBilis wallet

Trezor has released a warning after a customer reported a Tamagotchi-style hardware implant inside a Safe 5 hardware wallet purchased from CryptoBilis, a Southeast Asian reseller. The device contains an extra circuit board with a cellular module and antenna that sits between the wallet’s main board and its screen; the board allegedly reads the device’s screen, including the recovery phrase (wallet backup), and transmits it over a mobile network whenever the wallet is plugged in.

Trezor has not yet examined the device itself but has interviewed the customer and is arranging for the wallet to be sent to its lab for analysis. The incident was first reported by a customer in Indonesia who bought the wallet via Tokopedia after purchasing from CryptoBilis in August 2026.

Trezor warns all buyers who obtained a Trezor from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase, since restoring the old phrase on another device cannot be trusted if the device itself was tampered with. The company adds that, at this time, no CryptoBilis buyers have reported fund losses, and it cannot access users’ wallet contents. Trezor notes the wallet weight difference observed by the customer but cautions that small variations can have other explanations.

The firm emphasises that the device’s provenance matters: CryptoBilis has since been dropped as an authorised reseller, following Ledger’s investigation into losses among customers who bought CryptoBilis devices. The Singapore Police Force separately reported malfeasant Ledger-related wallet implants in Singapore retail devices, with investigations ongoing.