Trezor Urges New Recovery Phrases After Safe 5 Tampering Report

Trezor urged customers who bought a wallet from Southeast Asian reseller CryptoBilis since March 2026 to create a new wallet with a new recovery phrase after receiving a report that a Safe 5 sold through the reseller had been altered.

An Indonesian buyer who purchased the device through CryptoBilis' Tokopedia store reported an added circuit board between the device's motherboard and screen. The buyer described a cellular module and antenna that could capture information displayed on the screen, including a wallet recovery phrase, and transmit it over a mobile network. Trezor said Oct. 30 it has not received or inspected the device, so it has not verified the component or how it operates.

The guidance applies to all Trezor models bought from CryptoBilis, not only Safe 5. Trezor advises current users to move funds to a wallet created with a new recovery phrase and not reuse the old phrase. Buyers who have not set up a device should not initialize it or enter an existing wallet backup. Affected buyers can request a free replacement or a voucher equal to the purchase value; Trezor advises keeping the device and contacting support. No CryptoBilis buyers have reported lost funds in the case.