POPA ReconTrezor says one Trezor Safe 5 bought from former reseller CryptoBilis in August 2026 was reported with a hardware implant, described as an extra board with cellular module and antenna fitted between the main board and screen that could read what is shown on screen including the recovery phrase and send it over mobile network when powered, per Trezor and its blog.
Trezor says it has not yet received the device for lab examination, so it is treating the customer report as credible but unconfirmed, and says no CryptoBilis buyer has reported loss of funds, per the same post.
It urges anyone who bought a Trezor from CryptoBilis from March 2026 onward, any model including its Tokopedia store, to move funds at once to a newly created wallet with a new seed, never reuse the old seed, and not set up or enter an existing backup on an unused CryptoBilis device. Do not weigh or open it to check, per the blog.
Trezor removed CryptoBilis as a reseller on Oct 9, 2026 after reports of tampered Ledger devices through it, says four Trezor devices returned so far showed no tampering, and says affected buyers should keep the device and contact Support for a replacement, per the same post. Support will never ask for a backup.