I received a phone call from someone claiming to be an employee of Ledger, a well-known company for cryptocurrency hardware wallets. This person informed me that a suspicious login attempt had been detected on my wallet from Germany. They knew my name, surname, phone number, and email address.
The person asked if it was me who had made this connection. When I said no, they asked if I had used a VPN, which might have explained the connection from Germany. After I answered no, they advised me to secure my wallet by transferring my cryptocurrencies to TrustWallet, and then back to my Ledger wallet. They directed me to a legitimate link on the Ledger website explaining how to secure cryptocurrencies via TrustWallet.
They sent an email to my laposte.net address with the words to note down to create the TrustWallet account. When I didn't receive this email, I provided my Gmail address, which I did receive. They asked me to write down the words on a sheet of paper and delete the email, including from the trash, to prevent any potential hacker from retrieving these codes.
Once the TrustWallet account was created, they assisted me in transferring all my cryptocurrencies from my Kraken and MetaMask accounts to this TrustWallet account. During the transfer, gas fees were applied. The scammer asked me to note the fees for a double-check during the insurance reimbursement. They also advised me to choose the fast transfer option, even though it was more expensive.
At each step, they claimed to be handling another case simultaneously and put me on hold, but they remained available quickly if needed. Once the transfers were completed, they informed me that the Bitcoin transfer would take about 6 minutes and that they would call me back in 15 minutes to verify that everything had been transferred. After 20-30 minutes without hearing back, I checked the TrustWallet app and noticed that 6000 euros were missing. Upon reviewing the transaction history, I discovered unauthorized outgoing transfers, revealing that I had just been scammed.
The call came from a number starting with 09. About every 15 minutes, the conversation would cut off, and they would call me back from another number also starting with 09, claiming that these were highly secure and encrypted lines, justifying the frequent interruptions.