FBI Warns of Fake Token Scam on Tron

Home » Crypto News

With blockchain becoming harder to crack, attackers are increasingly targeting the people using it rather than the code underneath.

‘;
}
function loadTrinityPlayer(targetWrapper, theme,extras=””) {
cleanupPlayer(targetWrapper); // Always clean first ✅
targetWrapper.classList.add(‘played’);
// Create script
const scriptEl = document.createElement(“script”);
scriptEl.setAttribute(“fetchpriority”, “high”);
scriptEl.setAttribute(“charset”, “UTF-8”);
const scriptURL = new URL(`https://trinitymedia.ai/player/trinity/2900019254/?themeAppearance=${theme}${extras}`);
scriptURL.searchParams.set(“pageURL”, window.location.href);
scriptEl.src = scriptURL.toString();
// Insert player
const placeholder = targetWrapper.querySelector(“.add-before-this”);
placeholder.parentNode.insertBefore(scriptEl, placeholder.nextSibling);
}
function getTheme() {
return document.body.classList.contains(“dark”) ? “dark” : “light”;
}
// Initial Load for Desktop
if (window.innerWidth > 768) {
const desktopBtn = document.getElementById(“desktopPlayBtn”);
if (desktopBtn) {
desktopBtn.addEventListener(“click”, function () {
const desktopWrapper = document.querySelector(“.desktop-player-wrapper.trinity-player-iframe-wrapper”);
if (desktopWrapper) loadTrinityPlayer(desktopWrapper, getTheme(),’&autoplay=1′);
});
}
}
// Mobile Button Click
const mobileBtn = document.getElementById(“mobilePlayBtn”);
if (mobileBtn) {
mobileBtn.addEventListener(“click”, function () {
const mobileWrapper = document.querySelector(“.mobile-player-wrapper.trinity-player-iframe-wrapper”);
if (mobileWrapper) loadTrinityPlayer(mobileWrapper, getTheme(),’&autoplay=1′);
});
}
function reInitButton(container,html){
container.innerHTML = ” + html;
}
// Theme switcher
const destroyButton = document.getElementById(“checkbox”);
if (destroyButton) {
destroyButton.addEventListener(“click”, () => {
setTimeout(() => {
const theme = getTheme();
if (window.innerWidth > 768) {
const desktopWrapper = document.querySelector(“.desktop-player-wrapper.trinity-player-iframe-wrapper”);
if(desktopWrapper.classList.contains(‘played’)){
loadTrinityPlayer(desktopWrapper, theme,’&autoplay=1′);
}else{
reInitButton(desktopWrapper,’Listen‘)
const desktopBtn = document.getElementById(“desktopPlayBtn”);
if (desktopBtn) {
desktopBtn.addEventListener(“click”, function () {
const desktopWrapper = document.querySelector(“.desktop-player-wrapper.trinity-player-iframe-wrapper”);
if (desktopWrapper) loadTrinityPlayer(desktopWrapper,theme,’&autoplay=1’);
});
}
}
} else {
const mobileWrapper = document.querySelector(“.mobile-player-wrapper.trinity-player-iframe-wrapper”);
if(mobileWrapper.classList.contains(‘played’)){
loadTrinityPlayer(mobileWrapper, theme,’&autoplay=1′);
}else{
const mobileBtn = document.getElementById(“mobilePlayBtn”);
if (mobileBtn) {
mobileBtn.addEventListener(“click”, function () {
const mobileWrapper = document.querySelector(“.mobile-player-wrapper.trinity-player-iframe-wrapper”);
if (mobileWrapper) loadTrinityPlayer(mobileWrapper,theme,’&autoplay=1′);
});
}
}
}
}, 100);
});
}
})();

Summarize with AI

The FBI has notified users on the Tron network about a fake token impersonating the agency.

A post published on X by its New York field office on March 19 warned of a phishing campaign that tries to get people to give up their personal information and access to their wallets by pretending to be an official investigation notice.

Scam Targeting Tron Users

According to the law enforcement agency, attackers are sending out a malicious TRC20 token with the subject line “FBI message,” telling people to complete an “AML verification” or risk having their assets blocked. The message directs users to a fake website, where it prompts them to submit their personal information.

The FBI advised anyone who gets the tokens not to visit the site or give out personal details. It also urged any victims who may have already shared their identifying information to report the matter to the agency’s Internet Crime Complaint Center.

The warning is in line with research published by blockchain security company AMLBot on October 30, 2025, which showed a similar scheme targeting Tron wallets. The company says that attackers watch blockchain activity to find addresses that are affected by Tether freezes. Once a wallet is flagged, the user gets a “Survey” token with a link to a fake recovery site that looks like official communication.

If they follow the link, the website asks them to check their wallet status and then connect it to the platform. According to AMLBot, users are then asked for a fee in TRX, upon which the website quietly sends out an update that gives attackers access to the victim’s wallet, allowing them to take over accounts and wait for money that has been frozen to be released.

Shift Toward User-Targeted Attacks

The rise of the fake “FBI tokens” is another sign of a bigger shift in the way crypto scams are done that was recently reported by blockchain analytics company Nominis. The firm released a report on March 14 showing that total losses from crypto exploits had dropped sharply in February 2026, but attackers were increasingly focusing on manipulating users instead of finding technical flaws.