A real experience showing how scammers can impersonate the police, manufacture a security emergency and manipulate someone into compromising their cryptocurrency wallet.
Cryptocurrency scams are often associated with fake investments, promises of extraordinary returns or suspicious online trading platforms. However, not every crypto scam begins with an investment opportunity. Some involve criminals attempting to steal funds that people already own.
This experience, shared anonymously with BeScamAware, highlights a particularly convincing method in which scammers impersonated both the police and a well-known cryptocurrency hardware wallet provider.
What began as an unexpected telephone call supposedly warning of a criminal investigation developed into a carefully coordinated sequence of events. The scammers used official-sounding language, fabricated reference numbers, genuine details about cryptocurrency security and an imitation support website to create an overwhelming sense of urgency.
By the time the deception became clear, the contributor had lost their entire Bitcoin holding.
The story is an important reminder of how easily a convincing authority figure, followed by a seemingly helpful support representative, can turn an ordinary evening into a financial emergency.
The Story
An Unexpected Call from the Police
In September 2026, an individual received an unexpected telephone call from someone claiming to be a senior detective with the Metropolitan Police, working within a fraud and cybercrime unit.
The initial call went unanswered, but when the caller tried again shortly afterwards, the individual picked up.
The supposed detective explained that police had arrested a fraudster who was allegedly found in possession of information providing access to several people’s online accounts, including those belonging to the person receiving the call.
The caller then began asking questions about familiar online services, including shopping websites and payment platforms. When the individual confirmed using some of these services, the conversation moved towards cryptocurrency.
The caller asked whether they used a particular hardware wallet, Trezor. They did.
This detail made the warning considerably more concerning.
The supposed detective provided a crime reference number and offered to send further information by email. The individual also requested the caller’s police identification number, which was supplied without hesitation.
These details gave the conversation an appearance of legitimacy. The caller even suggested that the information could be verified through a local police station.
Believing their online accounts might be at risk, the individual immediately began changing passwords and reviewing their account security.
At this point, the scam had already achieved its first objective. It had created anxiety and established the idea that a serious security breach was taking place.
A Second Call, This Time from Cryptocurrency Support
While the individual was busy securing their accounts, another telephone call arrived.
This time, the caller claimed to represent Trezor, the company behind the individual’s cryptocurrency hardware wallet.
The supposed support representative explained that the police had contacted the company about a serious security breach. They claimed criminals might be able to obtain the wallet’s recovery information and steal the cryptocurrency stored within it.
The timing appeared to confirm the earlier police warning.
The second caller also supplied a support reference number, further reinforcing the impression that a genuine investigation was underway.
The individual was told that their wallet was in immediate danger and that logging into it could expose their funds.
The supposed representative then directed them to a website presented as an official Trezor support service.
The website looked convincing. It used familiar branding and even displayed security warnings about protecting recovery information.
What the individual did not realise was that the website was part of the deception.
When Urgency Overrides Caution
As the conversation continued, the individual became increasingly uncomfortable.
They considered ending the call and independently contacting the police to verify what they had been told.
However, rather than allowing the conversation to end, the supposed support representative transferred them to additional people who continued explaining the alleged security emergency.
The process became increasingly complicated.
The individual was guided through several online pages, including what appeared to be a security check confirming that their wallet had been compromised.
The website then presented instructions for creating new recovery information to protect the wallet.
By this stage, it was late in the evening. The individual was tired, confused and concerned about losing their savings.
They asked whether the process could be completed the following day.
The callers insisted that waiting would leave the funds dangerously exposed and continued urging immediate action.
What appeared to be helpful technical support was, in reality, sustained psychological pressure.
The Final Step
The scammers eventually instructed the individual to enter recovery information as part of what they described as a security procedure.
They presented the process as a precaution, suggesting that entering only part of the recovery information would be safe.
After following the instructions and submitting the information, the website appeared to generate a new recovery phrase.
Unfortunately, the process had not secured the wallet.
Instead, the individual’s Bitcoin was stolen.
The entire cryptocurrency holding was lost.
What began as a supposed police warning had ended with the very outcome the callers claimed they were trying to prevent.
Lessons Learned
Verify Police Contact Independently
One of the most important lessons from this experience is that a caller claiming to be a police officer should never be accepted as genuine simply because they provide a name, rank, identification number or crime reference.
These details can be invented.
If someone unexpectedly contacts you claiming to represent the police, end the conversation and contact the relevant police force independently. In the UK, 101 can be used for non-emergency police enquiries.
Never rely on a telephone number, email address or verification procedure supplied by the suspicious caller.
An identification number is not proof of identity unless the individual’s role and contact can be independently verified.
Protect Your Cryptocurrency Recovery Information
A cryptocurrency wallet’s seed phrase is one of its most sensitive security credentials.
Anyone who obtains sufficient recovery information may be able to access the associated funds, even without possessing the physical hardware wallet.
Never enter your seed phrase, wallet backup or recovery words into a website supplied by an unsolicited caller, email or message.
A genuine hardware wallet provider will not unexpectedly telephone customers and instruct them to reveal their recovery information.
The contributor also highlighted the value of keeping recovery information securely stored offline, somewhere that cannot be accessed impulsively during a stressful telephone call.
This creates an additional opportunity to stop and verify what is happening.
Recovery information must remain protected against theft, damage and loss, but keeping it securely out of immediate reach can help prevent decisions made under pressure.
Recognise the Power of a Coordinated Scam
One of the most striking elements of this case was how the second call reinforced the first.
A supposed police investigation was followed by a supposed cryptocurrency security emergency.
Because the second caller already appeared to know about the earlier warning, their explanation seemed more credible.
This is a powerful form of social engineering. Criminals can impersonate different organisations, create fictional departments and pass victims between supposed representatives to manufacture authority.
Multiple people repeating the same warning does not mean the warning is genuine.
They may all be part of the same scam.
Never Allow Someone Else to Dictate the Urgency
The contributor attempted to delay the supposed security procedure until the following day.
The scammers refused to accept this and insisted that immediate action was essential.
That pressure was a critical part of the deception.
When someone claims your money or accounts are in immediate danger, it can feel counterintuitive to end the conversation. However, taking time to verify a situation independently is often the safest response.
A genuine organisation should not require you to disclose secret recovery credentials because of an unsolicited telephone call.
The Outcome
The contributor reported losing their entire Bitcoin holding following the coordinated impersonation scam.
The deception involved two distinct stages. First, criminals posing as police officers created concern about compromised accounts. Then, individuals posing as cryptocurrency support representatives used that concern to direct the victim towards a fraudulent website and a dangerous wallet recovery process.
The account illustrates how a scam can become significantly more convincing when multiple callers appear to corroborate the same story.
It also highlights the danger of fraudulent recovery or security procedures, particularly when they involve a cryptocurrency wallet’s seed phrase, also known as its wallet backup.
Unlike a conventional account password, a wallet’s recovery information can allow someone to restore and control the associated cryptocurrency. Once that information is compromised, the funds may be at immediate risk.
Final Thoughts
Perhaps the most unsettling aspect of this story is that the individual recognised several reasons to be cautious.
They ignored the first call, requested police identification, began changing account passwords, considered contacting the police independently and eventually asked to postpone the process.
Yet the scammers continued.
They used reassurance, technical explanations, multiple supposed representatives and the threat of an imminent financial loss to keep the individual engaged.
Even the security warnings displayed on the imitation website became ineffective once fear and confusion had taken hold.
This is an important lesson for everyone, not just cryptocurrency users.
Scammers do not always need someone to believe everything they say. Sometimes, they only need to create enough uncertainty and urgency to persuade someone to follow one dangerous instruction.
The contributor’s central message is simple:
If you have even the slightest suspicion that something may be a scam, end the interaction and verify it independently.
Walking away from a suspicious conversation is not an admission that you do not understand the situation. It is a way of taking back control.
By sharing this experience, the contributor hopes others will recognise the warning signs before reaching the same devastating outcome.
To protect yourself online, remember the SCAM steps:
Protect yourself with Stop · Check · Ask · Monitor (SCAM)
STOP
If someone unexpectedly contacts you claiming that your accounts, cryptocurrency or savings are in immediate danger, pause before following their instructions. End the call if necessary. Do not allow urgency, fear or technical language to pressure you into disclosing information or making changes you do not fully understand.
CHECK
Independently verify the identity of anyone claiming to represent the police, a financial institution or a cryptocurrency wallet provider. Use trusted contact details obtained separately from official sources. Never rely on reference numbers, caller ID, convincing websites or contact details supplied during the suspicious conversation.
ASK
Seek another opinion before taking action. Contact the police through official channels, speak with the wallet provider using its verified support service, or discuss the situation with someone you trust. Asking questions and taking time to understand the situation can interrupt the pressure scammers rely on.
MONITOR
Keep an eye on your cryptocurrency wallets, online accounts and associated email addresses. If you believe your recovery information has been exposed, stop using the compromised wallet and urgently seek guidance through the wallet provider’s official support channels about securing any remaining funds. Change affected passwords, preserve evidence and report the incident to the relevant authorities.
A Final Reminder
A convincing caller is not proof of authority.
A realistic website is not proof of security.
And a supposed emergency does not mean you must act immediately.
BeScamAware – Stay alert, stay safe — and remember, by sharing your story, you help others protect themselves too.
This account has been shared with BeScamAware with permission. It has been anonymised and editorially adapted to protect the contributor’s identity while preserving the circumstances and lessons of the incident.
