He asked his wife to help transfer some coins, and as a result, over 2 million in assets were stolen. "I just asked her to click transfer, and all the coins disappeared..."
This is a man who sent us a plea for help at 2 AM.
He is almost going crazy.
He originally had nearly 2.3 million USDT in his wallet, which was the savings he accumulated after years of working in the cryptocurrency industry.
That day, he had to go on a business trip at the last minute, so he asked his wife to help him with a transfer:
"Just paste the recovery phrase I sent you, log into the wallet, and transfer to this address."
After his wife completed the operation, she said, "It has been transferred."
When he got off the plane and checked his phone, the coins were gone.
And it wasn't a case of "wrong transfer," but rather —
the wallet was completely emptied.
After investigating, the truth is quite lamentable:
He sent a screenshot of the recovery phrase to his wife via WeChat.
She copied the recovery phrase to log into the wallet, but she did it on an old Android phone connected to the home WiFi, which had several financial apps and a domestic plugin browser installed.
The hacker had long controlled a listening plugin in a certain browser, automatically identifying the recovery phrase format in the clipboard content; once identified, it would be uploaded to the server.
In other words:
The coins were not lost during her transfer; they were taken over by "someone else" the moment she opened the wallet.
His wife was devastated, repeatedly saying, "I was just following instructions; I didn't even touch the transfer..."
And he, in more pain:
"I can't blame her; it's all my fault for not thinking it through."
When he reported the case, he was questioned, "Was it a family member's operational error? This is a civil dispute."
The police refused to accept the case, his family felt guilty, the money was gone, and no one could understand his breakdown.
📣 A reminder to everyone, definitely do not do these things:
Send screenshots of the recovery phrase to relatives (even if it's someone you trust)
Let family members log into the wallet using devices that haven't undergone risk isolation
Use phones that have installed "acceleration tools," "free VPNs," or "financial plugins" to operate transfers
It's easy for family members who don't understand authorization or wallets to operate your assets and get hacked.
If you also encounter the situation of "assets stolen after family/friends operate" or "still there before the transfer, but gone after the operation," don't delay; a lot of evidence will be cleaned up in a few days.
