The incident occurred on July 16, 2026. A man reported an internet fraud at Police Station I in Jelenia Góra. He bought cryptocurrency and stored it in a private cryptocurrency wallet.
To make using the wallet easier, he decided to install a browser extension. He searched for a suitable extension, convinced that he was using legitimate and secure software.
After installation, the application displayed instructions telling the user to enter a recovery phrase, the so-called seed, consisting of 12 words. The man followed the instructions, unaware that he was giving the fraudsters full access to his wallet.
After a moment, he noticed that the open wallet contained funds different from those he had owned. When he checked his actual cryptocurrency wallet, it turned out that the assets stored there had already been transferred to another address to which he had no access. As a result of the fraud, he lost cryptocurrency worth nearly PLN 16,000.
How does this fraud work?
Cybercriminals create fake browser extensions that look almost identical to official extensions used to operate cryptocurrency wallets. After they are installed, they persuade users to enter their recovery phrase.
For a wallet owner, the seed is a security measure that makes it possible to regain access to funds. In the hands of criminals, however, it becomes a key enabling them to immediately take over the wallet and transfer all the cryptocurrency it contains.
How not to lose your cryptocurrency? Police recall the most important rules
Officers call for particular caution when using cryptocurrency wallets. Above all, you should not enter your recovery phrase on websites or in browser extensions unless you are completely certain of their authenticity.
Experts also recommend downloading applications only from official sources, carefully checking the developer, the number of downloads and user reviews, and avoiding clicking suspicious advertisements and investment-related links.
Additional protection is provided by enabling two-factor authentication (2FA), regularly updating the operating system and browser, and exercising caution whenever any software asks you to provide your recovery phrase.
Police officers stress that cybercriminals are constantly improving their methods, taking advantage of users’ haste and inattention. If you have any doubts, it is worth stopping the operation and verifying the information on the official website of the cryptocurrency wallet provider. This can help prevent the loss of funds stored in a digital wallet.