Trezor tells anyone who bought its wallets from CryptoBilis since March to move their funds after a report of a hidden cellular implant in a Safe 5

Trezor is warning customers of a former Southeast Asian reseller to move their crypto. In a notice on Friday, the hardware wallet maker said its security team received a responsible disclosure report on October 28 describing an implant in a Trezor Safe 5. The device was bought in August 2026 by a customer in Indonesia through CryptoBilis's store on the Tokopedia marketplace.

According to the report, an extra circuit board sits between the device's main board and its screen, carrying a cellular module and an antenna. The reporter says it can read what is shown on the screen, including the wallet backup, and send it over a mobile network when the device is plugged in. Trezor stresses it has not verified the claim and has not yet received the device, but it reviewed the photos and interviewed the reporter by video. It says it has no evidence of stolen funds; the reporter had already moved funds off the device.

Trezor's advice applies to anyone who bought from CryptoBilis from March 2026 onward: move funds to a new wallet with a new recovery phrase, do not set up an unused device, and contact Trezor Support, which offers eligible buyers a replacement device or a voucher. Trezor cut CryptoBilis from its reseller network on October 9, when Ledger began looking into losses among CryptoBilis buyers. The Block reports Ledger has since confirmed physical tampering in devices sold through the same distributor.