Recently, people who use crypto money have found a new kind of fake Trezor One hardware wallet. These fake wallets look almost exactly like the real ones. The big problem is that these devices can steal your secret recovery words (seed phrase), your PIN, or other private information without you even knowing. Below are the technical details and clear signs that show this is a very clever fake device.
Serious security risks
The most critical danger of using a fake Trezor wallet is the complete loss of your digital assets, often without any warning signs. These counterfeit devices are not just defective – they are intentionally designed for theft.
In many reported cases, fake wallets were programmed to silently capture sensitive information, such as:
- Seed phrases during wallet setup
- PIN codes used to unlock the wallet
- Transaction data and receiving addresses
This data can then be transmitted to an external server controlled by attackers. Once they have your seed phrase or private key, they can:
- Access your wallet from anywhere in the world
- Move your funds to their own addresses
- Completely erase your control over the assets
For these reasons, using a fake hardware wallet is not just insecure – it is actively dangerous. Verifying the authenticity of your device before using it is absolutely essential.
Trezor video:
Genuine vs. Fake Trezor One
| Trezor One | Genuine | Fake Trezor One |
| Around 2018 (and later) | ||
| Purchase Source | Always buy from the official Trezor Shop, their official Amazon shop, or an authorized reseller. | Direct sale, “one-to-one” copies, often sold cheap on unofficial marketplaces (e.g., eBay, AliExpress). |
| Packaging | Two silver holographic seals and plastic foil show tampering; Securely glued packaging; Includes device, USB cable, “getting started” card, two 24-word recovery seed cards, stickers. | Tampered/Missing Holographic Seals; Easy-to-open packaging. |
| Device Contents | Includes Trezor One device, USB cable, “getting started” card, two 24-word recovery seed cards, and stickers. | May have missing items, or different quality components. |
| Initial Setup & Firmware | No pre-installed firmware (user installs during setup);
Bootloader verifies official firmware signatures; Trezor Suite accepts only officially signed firmware. |
Pre-installed firmware;
Unofficial bootloader 1.12.0; Unofficial Firmware Warnings; Hidden firmware 1.13.0; Fake updates (version doesn’t change). |
| Microcontroller (Hardware) | Uses STM32F2 series microcontroller with read-out protection (RDP 2) active. | Uses an STM32F4 microcontroller. |
| Seed Generation Method | Requires new, random recovery seed generation during initial setup; Seed is displayed on the device screen for physical transcription. | Pre-generated/Pre-filled Recovery Seed. |
| Trezor Suite Interaction
|
Accurately identifies genuine devices and prompts for official firmware installations and updates. | may fail to detect as non-genuine, appearing authentic without warnings, even with fake bootloader/firmware. |
| Warning Messages | Setup should proceed without warnings or errors, indicating a secure and genuine device. | Any warning messages or errors displayed during initial setup. |
| Analysis | https://trezor.io/guides/trezor-devices/trezor-model-one/authenticate-model-one | https://blog.trezor.io/psa-non-genuine-trezor-devices-979b64e359a7 |
How to identify a fake Trezor One?
Physical Inspection: First line of defense
Upon the delivery, a thorough physical inspection is your first line of defense against counterfeits.
- Packaging Integrity: The Trezor Model One packaging is secured with two silver holographic seals and a plastic foil. This design is specifically engineered to show clear signs of tampering if opened. Always meticulously check for any damage, tears, or missing seals before opening. Some fake units are missing tamper-proof seals or security stickers that normally break when the packaging is opened – standard features found on authentic Trezor products.
- Package Contents: A genuine Trezor Model One package should consistently contain The Trezor Model One device itself, A USB cable (Type B), A “getting started” card, Two 24-word recovery seed cards, Four stickers.
- Packaging and Holographic Seal Evolution: Be aware that Trezor Model One packaging and holographic seals have undergone several design changes since 2016 (e.g., in 2018 and 2021).
- Low-quality build:
- Easily Opened Casing: The device casing on counterfeits can often be easily opened by hand without needing any special tools.
- Poor Soldering: If the device is opened (which you typically shouldn’t need to do with a genuine product), you might notice low-quality soldering on the circuit board.
*Important reminders: Inspect packaging for original seals. If the box looks tampered with or unsealed, do not use the device.
Hidden firmware 1.13.0
Your Trezor’s firmware is its operating system, vital for all device functions like handling transactions and managing private keys. It’s open-source for transparency and gets regular, securely verified updates by the Trezor’s bootloader.
Counterfeit devices often use a hidden firmware version 1.13.0. When you try to update it, the process might seem normal, but the firmware version won’t change. This is a fake update and a clear sign of a non-genuine device.
*Important reminders: After receiving your device, always initialize it from scratch using Trezor Suite and verify the firmware.
No warning from Trezor Suite
Trezor Suite is the official app for managing your Trezor wallet and crypto. However, it’s concerning that Trezor Suite often fails to detect counterfeit devices.
The app might recognize a fake wallet as genuine, showing no warnings about unofficial firmware, a fake bootloader, or incorrect hardware. This suggests scammers have modified these devices to bypass basic security checks in the official software, making them appear legitimate.
*Important Reminder: Always be skeptical of a Trezor device that doesn’t display any warnings, especially if you have any doubts about its origin.
Fake bootloader – Version 1.12.0
The bootloader is a vital, low-level program in your Trezor. It verifies firmware authenticity every time the device starts or updates, warning you of anything suspicious.
However, counterfeit Trezor One wallets use an unofficial bootloader (version 1.12.0). An unverified bootloader is a serious risk: it can allow malicious code to be installed, monitor your actions, or even record your seed phrase during initial setup.
*Important Reminder: Never proceed with setup if your Trezor displays an unofficial bootloader warning.
Incorrect Microcontroller
The microcontroller (MCU) is the “brain” of your Trezor, running its firmware and handling all operations from display to cryptographic functions.
Counterfeit Trezor One devices use an STM32F4 microcontroller, while genuine ones use an STM32F2. This is a critical difference. The STM32F4’s architecture allows deeper firmware-level access, making it easier for attackers to inject malicious code and steal sensitive data.
*Important Reminder: A different microcontroller signals a fake. If the MCU is wrong, so is the device’s security.
Where can I buy an authentic Trezor?
To ensure the security of your digital assets, it is essential to purchase your Trezor hardware wallet only from official sources.
The safest and most direct way to purchase a genuine Trezor device is through the official website: https://trezor.io.
Trezor works with a network of official distributors and resellers around the world. Buying from these trusted partners ensures you receive a legitimate device along with access to local customer support. In Vietnam, one of the longest-standing and officially listed resellers is BitcoinVN Shop, an official partner since 2017.
Given the regulatory and logistical difficulties of importing cryptographic hardware into Vietnam, BitcoinVN Shop offers a reliable and convenient way to get your Trezor device locally — without the risk of customs delays, seizure, or additional fees. For those who prioritize operational security, our team can also facilitate anonymous cash purchases, helping you avoid having your sensitive personal data stored in manufacturer or postal databases.
BitcoinVN is known for its long-standing reputation in the Vietnamese crypto community and is an authorized Trezor distributor. Products sold through BitcoinVN are sealed, tamper-proof, and verified for authenticity.
You can find the full list of Trezor’s authorized resellers on the official Trezor website here: https://trezor.io/resellers.
Living abroad? Purchase straight from Trezor Store.
*Important reminders:
- Never buy from online marketplaces like eBay, Facebook, or unknown stores, even if the price is lower.
- Avoid second-hand devices. A pre-owned wallet may already be compromised.
Conclusion
Using a fake Trezor One hardware wallet not only puts your digital assets at risk, but also carries the danger of losing all your funds. To protect your assets, always purchase devices from official sources and carefully verify them before use. If you have any doubts, do not hesitate to contact Trezor support for immediate assistance. Your security starts with caution and smart choices.
Need further guidance?
Our in-house Cybersecurity team at BitcoinVN offers 1:1 consulting sessions designed to help you take full control of your digital assets – securely and confidently.
Whether you’re just getting started with self-custody, exploring advanced setups like MuSig, or want to harden your operational security, our experts will guide you step-by-step toward true self-sovereignty. No fluff, no shortcuts – just practical, Bitcoin-native security tailored to your needs.
🔐 Book your private session today at bitcoinvn.io/consulting
