Trezor Urges CryptoBilis Wallet Buyers to Move Funds After Implant Report

Trezor urged customers who bought its hardware wallets through Indonesian reseller CryptoBilis since March 2026 to move their funds after a customer described a suspected implant in one device.

In its Friday, Oct. 30, advisory, Trezor recommended transferring funds to a newly created wallet with a new recovery seed. It also told customers not to initialize unused devices bought through CryptoBilis. Eligible buyers can contact Trezor support for a replacement device or voucher.

The customer bought a Safe 5 through Tokopedia in August and reported an extra circuit board between the device’s main board and screen. The report described a cellular module and antenna that could read displayed information, including the wallet backup, and send it over a mobile network when the device is plugged in.

Trezor has not received the Safe 5 for lab examination. It considered the report credible after reviewing photos and interviewing the customer by video, but the implant and its alleged capabilities have not been confirmed.

Trezor said no CryptoBilis buyer had reported lost funds to the company, which cannot see customers’ wallet balances. It found no signs of tampering in four devices bought through the reseller that it inspected. Trezor removed CryptoBilis as a reseller on Oct. 9, after Ledger began investigating losses among buyers of devices sold through the reseller.