The Tron multisig scam is one of the most common TRC20 scams. A stranger shares a seed phrase or private key of a wallet holding thousands of USDT and asks for a small favour: "send some TRX for the fee and take the USDT as a reward". The USDT is real, the balance is real — but you will never be able to move it.
How TRON account permissions work
TRON accounts have two permission types: owner and active. The owner permission can be re-assigned to another key, or to a set of keys with a threshold (multi-signature). Scammers set the owner permission to their own key (or a 2-of-2 multisig where they hold the second key). The seed phrase you receive controls a key that is no longer allowed to sign transfers.
The typical scenario
- You receive a "leaked" seed phrase in a Telegram group, YouTube comment or dating chat.
- You import it and see, e.g., 3,000 USDT TRC20. The balance is real on Tronscan.
- To transfer USDT you need TRX for energy. You send 20–50 TRX.
- Transfer fails: "Permission denied" or the transaction never signs.
- Your TRX is swept instantly by the scammer, who controls the real owner key.
How to detect a multisig scam on Tronscan
Open the address on Tronscan and look at the Permissions section (also visible in TronLink under Account → Permissions). If the owner permission lists an address that is not yours, or the threshold is greater than the weight of your key, the wallet is a trap.
| Sign | Meaning |
|---|---|
| Owner permission = a different address | You cannot sign anything meaningful |
| Threshold 2, your key weight 1 | Second signature from the scammer is required |
| Dozens of small TRX deposits from random wallets | Previous victims sending fees |
Other TRC20 scams to know
- Fake USDT — a token named USDT with a wrong contract. Always check the contract on Tronscan.
- Approval drain — a dApp asks for unlimited USDT approval; later the scammer drains your wallet.
- Address poisoning — look-alike addresses inserted into your history.
Protect yourself
Never import someone else's seed phrase. Never send TRX "for fees" to a wallet you did not create. Check permissions on Tronscan. And before accepting USDT from any stranger, run a Tron AML check — scam wallets are usually already labelled.