TronLink scams: fake apps, fake support and permission tricks

The TronLink scams

Permission updates

TRON has a transaction type that updates account permissions. A malicious DApp or a scammer with your key can use it to make their key the owner. TronLink shows this as a permission change; read it before signing. The TRON multisig scam explains the result.

Related

Flash USDT TRC20, USDT TRC20 explained, copy tokens in TronLink.

How a permission takeover looks in TronLink

TRON accounts can change who controls them with a transaction type called AccountPermissionUpdate. TronLink shows it when a DApp or a script asks for it. Most people never see one in normal use, which is why it slips through: it looks like one more confirmation screen.

Reject any permission update you did not start. There is no legitimate reason for a DApp, a support agent or an airdrop to change your account’s owner.

Fake TronLink apps and extensions

Search ads and lookalike sites offer copies of the TronLink browser extension and mobile app. Before installing:

1. Start from the official TronLink website, typed yourself, and follow its store links.
2. On the store page, check the publisher name, the number of users and the review history.
3. If an extension asks you to import a recovery phrase immediately, before you chose import, uninstall it.
4. Keep only one TronLink extension installed; remove duplicates.

Energy and bandwidth tricks

TRON transactions cost energy and bandwidth, paid with TRX or rented. Scammers sell “energy rental” at a discount through bots and sites that take TRX and deliver nothing, or ask receivers to pay energy to “release” incoming USDT. Receiving never costs you anything. If you rent energy, use a service you can verify, and start with a small order.

TRC20 approvals

TRON tokens use the same approval idea as Ethereum. A DApp can ask TronLink for an approval that lets it move your USDT. Tronscan lets you review and cancel approvals for your address. Check it after you connect to anything new. USDT approval scams.

A TronLink safety routine

TronLink fake app: how to tell before installing

A TronLink fake app copies the name, icon and screenshots of the real wallet. It is designed to capture your recovery phrase when you import a wallet.

The same rules apply to the browser extension. Install only from the link on the official site. See fake crypto wallet apps.

TronLink support scam: the conversation

A TronLink support scam begins when you post about a problem in public, such as a missing USDT transfer. Someone replies as “TronLink support” and moves you to a private chat.

1. They ask which wallet you use and how much you hold.
2. They send a link to a “validation” or “sync” page.
3. The page asks for your recovery phrase or a signature.
4. Your wallet is drained, or its permissions are changed.

Real support never asks for your recovery phrase, and never contacts you first in private messages. Get help from the official help pages only.

TronLink scam signs in signing requests

• Permission update: changes who controls your account. Almost never needed. See TRON multisig scams.
• Approve on a TRC20 token: lets a contract spend your USDT. Check the spender and amount.
• Freeze or delegate TRX: real features, but a scam site may use them to move your resources.
• Unknown contract call: if you cannot tell what it does, reject it.

Approvals are explained in the USDT approval scam.

Copy tokens in TronLink

Copy USDT tokens appear in TronLink like anywhere else. Open the token, check its contract and compare with TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t. Hide anything that does not match, and never visit websites printed in a token’s name.

More on TRON copies is in flash USDT TRC20.

A monthly TronLink check

1. Open your address on Tronscan and check the Permissions section.
2. Review token approvals and revoke unused ones.
3. Remove hidden or spam tokens from your list.
4. Check connected sites in TronLink and disconnect ones you do not use.

Questions about TronLink scams

Can TronLink freeze my account?

No. TronLink is a self custody wallet. It cannot freeze or reverse anything.

My TRX was “frozen” in TronLink. Is that a scam?

Freezing TRX for energy or bandwidth is a real feature. If you did not do it, check your permissions and recent signatures.