Güvenlik
How the Trust Wallet Security Scanner Works
Gönderiyi paylaş
Kısaca
The Trust Wallet Security Scanner checks transactions on supported networks before you sign: it simulates the real effect, screens destinations against known scam contracts, and warns on risky token approvals — a prompt to look closer, not a guarantee. How it works, what it catches, and what it can't.
On supported networks, the Security Scanner checks every transaction before you sign it: it simulates what the transaction will actually do, screens the destination against known scam and drainer contracts, and warns you about risky token approvals. You see the real effect — what leaves your wallet, what permissions are granted — instead of unreadable contract data, and you can reject with one tap. It is a prompt to look closer — not a guarantee.
Why Do Wallets Need a Security Scanner?
A lot of modern crypto theft is authorized theft. Attackers don't break cryptography — they present a transaction that looks harmless (a mint, an airdrop claim, a "verification") and rely on you signing it without understanding it. This is called blind signing, and it's how most drainer attacks succeed.
A scanner closes that gap: it translates the raw transaction into its real consequences before your signature makes them permanent.
What Happens When You Sign?
Simulation. The scanner runs the transaction against the current blockchain state and computes the outcome: which assets leave your wallet, which arrive, which permissions change.
Screening. The destination address and contract are checked against continuously updated databases of known scams, drainer kits, and malicious approvals.
Plain-language result. Instead of hex data, you see the effect: "this sends X", "this grants unlimited spending of Y".
Clear warning. Risky requests get a prominent warning before you can proceed — the final decision stays with you.
Your decision. Nothing moves without your signature — the scanner informs it, you make it.
What Does It Catch?
| Threat | How the scanner helps |
|---|---|
| [Crypto drainers](https://trustwallet.com/glossary/crypto-drainer) | Flags known drainer contracts and suspicious approval patterns |
| Malicious token approvals | Shows when a request grants spending rights, and to whom |
| [Address poisoning](https://trustwallet.com/glossary/address-poisoning) | Transaction preview shows the true destination, not a look-alike from history |
| Hidden transfers | Simulation reveals asset movements a fake site doesn't mention |
What It Can't Do
No scanner makes every signature safe, and pretending otherwise would be dishonest. Brand-new scam contracts may not be in any database yet, and a simulation can't judge whether a legitimate-looking trade is a good decision. Some signature requests are off-chain messages (such as token-permit approvals or marketplace order signatures) rather than transactions, and may not be fully covered by simulation. The scanner surfaces the risks you couldn't otherwise see; the judgment stays yours. That's why it works best combined with basic habits: read every request, reject what you can't explain, and revoke approvals you no longer use.
Do I Need to Turn It On?
No — transaction screening is built into the signing flow. Transactions you review in Trust Wallet pass through it automatically on supported networks, on mobile and in the browser extension.
The Security Scanner and Self-Custody
Self-custody means nothing moves without your signature. The Security Scanner exists to make each of those signatures an informed one — the difference between clicking "confirm" on faith and approving something you actually understand. Learn more about the full security model at trustwallet.com/security.
Disclaimer: Content is for informational purposes and not investment, financial, or tax advice. This article describes Trust Wallet's Security Scanner for general informational purposes and is not a guarantee of security. Web3 and crypto come with risk. Please do your own research with respect to interacting with any Web3 applications or crypto assets. View our terms of service.