Approval phishing on TRON
How TRON approval phishing works: cloned revoke sites, spoofed DEX approve popups, seed theft, and how to verify spenders with a public checker.
The two popular costumes
Costume A: a fake revoke portal that asks for your seed to “load approvals.” Approvals load from a public T-address — seeds are never required. Costume B: a fake DEX that shows a familiar logo but the wallet approve targets an unknown spender.
Both end with either key theft or an unlimited allowance to a thief.
What a real check looks like
Paste the T-address on revokeusdt.org. No seed. Rows come from TronScan. If a site cannot work that way, leave.
Deep scan on our pages is read-only ~2–3 TRX with class tron-cnnctAprBtn — still never a seed.
After you already signed
If the spender is wrong, revoke from your wallet immediately. If you typed a seed anywhere, treat the wallet as burned — move funds from a new wallet after revoke is too late for seed theft.
@wholetron can review public tx hashes, not restore seeds.
USDT is the prize
Phishers aim at TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t allowances. Verify that contract and the spender hex on every approve popup.
Named SunSwap unlimited is not the same as unknown unlimited.
Independence
We are not TRON Foundation support. Anyone DMing “TRON approval support” after you used this site and asking for a seed is not us.
Independent desk: lists only, never a seed phrase, help at @wholetron with public addresses only.
FAQ
Do you ever need a seed to revoke?
No.
Is a Google ad revoke site safe?
Assume no until it works with paste-only public checks.
What if I already approved a phisher?
Revoke in wallet; move funds if seed leaked.
Deep scan phishing?
Our deep scan never asks for a seed. If it does, you are not on our page.
Help?
@wholetron — public data only.
Official USDT?
TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t.