

Is Trust Wallet safe? What its own terms say
Is Trust Wallet safe to use for casino deposits?
Trust Wallet's terms disclaim custody and access to your keys, so by their account only you can sign a deposit. Its terms prohibit illegal gambling only (trustwallet.com, read 2026-09-28); whether a casino is legal where you are is your local law's question. The terms name no company you contract with. 7 points are not verified. 2 primary-source incidents are recorded.
Documents last checked Reviewed by CryptoGuardz Register Desk, editorial desk
Disclosure: CryptoGuardz has no commercial relationship with Trust Wallet, earns nothing if you install it, and has not contacted the company or given it notice of this entry. Every statement below is either a verbatim quote from a document Trust Wallet publishes or a statement about a public record, and both carry the date they were read. Corrections go to the corrections page.
1. What this means for you
Consequences first, in the conditional, each one produced by a clause in a document Trust Wallet publishes itself. Every line links to that clause, quoted in full and dated. None of them is a claim that Trust Wallet can move your coins on chain: the terms disclaim that power and this register takes them at their word on it.
- Your access to the app can be withdrawn if Trust Wallet decides to withdraw it The termination clause is discretionary and states no grounds you could stay inside. Your keys are still yours; the software you reach them through is not.
- You are contracting with someone you cannot name if you use the swap, the on-ramp or the staking inside the app 9 sub-service clauses are recorded across 5 kinds of service, and most of the counterparties are identified in the terms only as a third party.
- You can recover no more than 100 US dollars if Trust Wallet is liable to you at all The aggregate liability clause caps every claim you could bring, whatever the size of the balance the software was holding the keys to.
- You cannot tell who to sue, because the binding document names no company No company name, number or registered address appears in the terms of service, the privacy notice or the about page. A choice of law is not a statement of incorporation.
- You are relying on a document that does not describe the product if you read only the terms The recovery model the marketing pages describe is not the recovery model the binding document describes.
- You are in breach of the terms if you use Trust Wallet for illegal gambling The stated consequence of a breach is loss of access to the interface. Your keys stay yours.
2. What this entry records, and what it does not
This register publishes no number for a wallet. The payout score on the casino register has five defined components and a published arithmetic; no equivalent instrument exists here. What follows is a field-by-field account of what was read, where and when.
| Binding terms | Read in full16 clauses captured verbatim across 7 topics, retrieved 2026-09-28 |
|---|---|
| Contracting entity | Not disclosedNo company name, number or registered address appears in the terms of service, the privacy notice or the about page. |
| Custody position in the terms | Disclaims custody and disclaims access to key materialAsserted from the clause. The terms state Trust Wallet does not gain or retain the wallet password, encrypted private key, unencrypted private key or secret phrase. The privacy notice repeats the position as a data-processing statement: wallet information is stored locally on your device under your custody. |
| Sub-services | 9 clauses recordedSwap · Staking · Fiat on-ramp · NFT marketplace · Node and RPC. A count of recorded clauses, not of distinct companies. |
| Code audit | Not measuredNo security audit, source review or reproducible-build check has been carried out or read by this register. A wallet's safety is largely decided there, and nothing on this page speaks to it. |
| First-party test | Not measuredNo transaction has been signed, no swap executed and no recovery flow run through this product by this register. |
| Default node provider | Not disclosedNo RPC or node provider is named in any primary document retrieved. |
3. What we could not verify
Every entry carries this section. The gaps are published because a reader deserves the limits of the check as well as its results.
- The legal entity behind Trust Wallet. No company name, company number or registered address appears in the terms of service, the privacy notice or the About Us page. This is the most significant gap in the file: the user's counterparty is not identified in the document that binds them.
- The default RPC or node provider and what it can see. The terms refer to node servers you have selected but name no default provider, and the privacy notice does not identify one.
- The named swap counterparty or aggregator. The terms describe third-party DApps and DEX generically; no aggregator is named in any primary document retrieved.
- The named staking provider or validator operator.
- The full list of fiat on-ramp providers. MoonPay is named in a Trust Wallet product announcement; no complete list was found in a primary document.
- The NVD record for CVE-2023-31290 and the Trust Wallet community postmortem were cited via the GitHub Advisory Database mirror rather than fetched directly.
- Whether the terms of service, last updated 1 January 2024, have been superseded by a newer version not published at the canonical URL. The retrieved page carries that date.
4. Who you are contracting with
The binding document names no company at all. This is the largest gap in this entry. A user cannot determine from the document that binds them who to sue, where a judgment would be enforced, or whose insolvency estate they would be a creditor of.
| Named counterparty | Not disclosedsource · retrieved 2026-09-22 |
|---|---|
| Jurisdiction | Hong Kong governing law, with a Hong Kong arbitral seat. This is a choice of law, not a statement of incorporation; no jurisdiction of incorporation is stated. |
| Relationships disclosed | Trust Wallet was acquired by Binance on 31 July 2018. Binance announced the completed acquisition on its own announcement channel. Neither the Trust Wallet terms of service, the privacy notice, nor the trustwallet.com About Us page mentions Binance. A reader relying on Trust Wallet's own documents would not learn of the relationship. |
Trust Wallet, and/or its affiliates (“we,” “our,” or “us”), offers its software services through our website at trustwallet.com.trustwallet.com
Excluding scenarios where Applicable Law stipulates or offers an alternative, these Terms, inclusive of the arbitration agreement herein, are to be governed by, and interpreted in line with, the laws of Hong Kong.trustwallet.com
Binance has completed the acquisition of Trust Wallet, a secure and intuitive mobile wallet.binance.com
Today marks the two-year anniversary of Binance’s partnership with Trust Wallet, one of the leading cryptocurrency wallets with more than 5 million users since Trust Wallet was acquired on July 31, 2018.binance.com
5. The custody claim, and what the binding document says
What Trust Wallet says in the place a user reads, against what it says in the place that binds a user.
Trust Wallet is a self-custody crypto wallet for iOS, Android and your browser. Buy, swap, stake and explore Web3 across 100+ blockchains while your private keys stay on your device.trustwallet.com · 2026-09-22
Trust Wallet serves as a non-custodial digital wallet software intended for digital assets such as cryptocurrencies, virtual commodities, and NFTs ("Digital Assets"). This means that you, and only you, have complete control over and responsibility for your Digital Assets and private keys, thereby authorizing transactions from your wallet address autonomously.trustwallet.com · 2026-09-22
Non-custodial. Your private keys never leave your device. Holdings sit exactly where you put them.trustwallet.com
Please note that we do not gain or retain your wallet password, encrypted private key, unencrypted private key, or secret phrase connected to your wallet. Furthermore, we cannot produce a replacement password for your wallet if you forgot your primary password.trustwallet.com
6. Recovery, and where the terms and the marketing differ
| Cloud or hosted backup offered | yes |
|---|---|
| What is stored | An encrypted copy of the secret recovery phrase, encrypted with a password the user sets. Separately, for the SWIFT smart contract wallet, a passkey is created automatically at wallet creation and is used in place of a password or twelve-word phrase to protect and recover the wallet. |
| Where | For Encrypted Cloud Backup, the user's own iCloud or Google Drive account rather than Trust Wallet's infrastructure. For SWIFT passkeys, the device password manager synced to the user's iCloud or Google account. |
| Changes the custody position | noRecorded as false on the marketing statement that the encrypted copy sits in the user's own cloud account and that Trust Wallet cannot reset or recover the password. The binding document does not address cloud backup at all; see the note below on where the two differ. |
The one exception is optional Encrypted Cloud Backup: if you enable it, an encrypted copy is stored in your own cloud account (iCloud or Google Drive), not on Trust Wallet's infrastructure, and can only be decrypted with a password you set.trustwallet.com
An encrypted backup of certain information associated with your wallet can be stored on eligible devices.trustwallet.com
This is the clearest divergence in the Trust Wallet file. The terms of service, last updated 1 January 2024, say only that an encrypted backup of certain information can be stored on eligible devices. They do not say what is backed up, do not mention iCloud or Google Drive, do not mention a user-set encryption password, and do not mention passkeys or the SWIFT smart contract wallet at all. The blog and support material, written in 2024 to 2026, describe a named cloud backup product and a passkey-based recovery model that replaces the recovery phrase entirely. A reader who read only the binding document would not know either product existed. Where the two differ, the terms are recorded as the governing text and the gap is recorded as a defect in the terms.
7. The app is not the wallet
9 clauses, each one a place where the product routes a user to a counterparty the user never contracts with by name, under terms the user never opens. The count is of recorded clauses and not of distinct companies: two entries can name the same counterparty and each still be a separate thing the terms permit.
Trust Wallet does not control, endorse, or take responsibility for your engagement with or use of DApps or DEX. Trust Wallet has no liability or obligation related to your use of DApps or DEX, including but not limited to any transactions that are disputed or result in losses.trustwallet.com
The amount that you can trade through DEX each day is subject to the rules and limitations set by the third-party developers of the Smart Contracts. Trust Wallet does not control these limits and is not responsible for enforcing them.trustwallet.com
When you access or utilize the Staking Service, you will work with a third-party provider that stakes specific Digital Assets ("Staked Digital Assets") for validating transactions on the related blockchain network.trustwallet.com
Trust Wallet will never take custody of any of your rewards or assets and has no control over any Proof-of-Stake network where Trust Wallet may exercise validation rights delegated by you.trustwallet.com
If you opt to use Trust Wallet to purchase Digital Assets with your credit or debit card, the chosen amount will be converted into the applicable Digital Asset and credited to your wallet by a third-party entity.trustwallet.com
When using this service, you are bound by any terms and conditions set forth by the specific third-party service provider. Trust Wallet has no influence over these terms and can’t intercede on your behalf should any disputes arise;trustwallet.com
Trust Wallet has added Cash App Pay as a payment method through MoonPay. Eligible US customers can now use their Cash App balance at MoonPay checkout to buy crypto without entering card details.trustwallet.com
Our platform connects you to a variety of services provided by our partners, which include but are not limited to crypto to crypto exchanges ("swap"), staking services, buying and selling of cryptocurrencies, services to display balances in fiat currency, cryptocurrency rate displays, decentralized finance applications for the exchange, lending or borrowing of cryptocurrencies, visualizing NFTs, and NFT minting, buying, and selling. Note that we do not have any control over these third-party services ("Third Party Services").trustwallet.com
You take full responsibility for the outcomes of any issues related to these transactions, including but not limited to transfers to incorrect addresses or problems with the node servers you have selected.trustwallet.com
8. Withdrawing your access to the interface
Your keys are yours. The software you reach them through is licensed, and the licence can be withdrawn. 3 clauses are recorded on this point.
We may, in our sole discretion and without cost to you, with or without prior notice, and at any time, modify or discontinue, temporarily or permanently, any portion of our Services. You are solely responsible for storing outside of the Services a backup of any wallet address and private key pair that you maintain in your wallet.trustwallet.com
Any use of Trust Wallet not explicitly authorized in these Terms, devoid of our prior written consent, is rigorously prohibited and will lead to an immediate termination of your license to use Trust Wallet without notice.trustwallet.com
Our Services are evolving over time, we may change or discontinue all or any part of the Services, at any time and without prior notice, and at our sole discretion.trustwallet.com
9. Who can block an address
Trust Wallet claims no power to block an address in the documents read. No clause in the documents read discloses that another party in the stack can freeze or blacklist an address either. That is an absence of disclosure, not a guarantee that no such party exists.
Notwithstanding the aforementioned conditions, we maintain absolute discretion to prohibit certain individuals from accessing or utilizing Trust Wallet. Additionally, please note that we reserve the right to modify our eligibility criteria at any given time, in accordance with relevant laws, regulations, and company policies.trustwallet.com
This is a right to exclude persons from the interface, not a right to block an address on chain. The terms state separately that Trust Wallet is not equipped to cancel or modify a transaction.
While we are not obligated to monitor any user content, we maintain full discretion to initiate any actions at any time and for any reason without notice should you breach these Terms.trustwallet.com
10. What the terms say about gambling
Position recorded: illegal gambling only. Trust Wallet does not hold your keys, so the stated consequence of a breach is loss of access to the software, not loss of the coins.
You commit to abstain from utilizing our Services for funding, supporting, or taking part in any illegal activities including, but not limited to, prohibited trade, illegal gambling, fraud, money laundering, or terrorist activities.trustwallet.com
The card side of the same question is on the card register, and the casino side on KYC on withdrawal.
11. Chains it names
Of the eight chains this register filters on, Trust Wallet names 6: Bitcoin, Ethereum, Solana, BNB Chain, Tron, TON. Not named on the pages read: Base, Polygon. Networks named on the cited Trust Wallet pages. Base and Polygon were not confirmed in words in this pass.
Send, receive and manage assets on Bitcoin, Ethereum, Solana, BNB Smart Chain and 100+ networks from one wallet.trustwallet.com
TRON Wallethelp.trustwallet.com
TON Wallethelp.trustwallet.com
12. Liability, amendment, arbitration and where you can use it
The aggregate liability clause caps every claim you could bring at 100 US dollars, whatever the balance involved. It is the clause that decides what the rest of the document is worth.
IN NO EVENT SHALL OUR LIABILITY TO YOU FOR ALL DAMAGES (OTHER THAN MAY BE REQUIRED BY APPLICABLE LAW IN CASES INVOLVING PERSONAL INJURY) EXCEED THE AMOUNT OF ONE HUNDRED U.S. DOLLARS ($USD100.00) OR ITS EQUIVALENT IN THE LOCAL CURRENCY OF THE APPLICABLE JURISDICTION.trustwallet.com
You agree that any claim you may have arising out of or related to your relationship with us must be filed within one year after such claim arises, otherwise, your claim is permanently barred.trustwallet.com
We reserve the right to update or modify these Terms at any time at our sole discretion. If we do so, we’ll let you know by either posting the revised Terms on our website, on our mobile application or through other methods of communication which we deem reasonable. Such revised Terms as posted will take effect immediately, unless otherwise indicated.trustwallet.com
We reserve the right to modify this section at any time without prior notice. It is your responsibility to regularly check this section for any amendments. Your continued use of the Staking Service signifies your acceptance of these terms and any amendments thereof.trustwallet.com
you and Trust Wallet agree that, subject to the clause regarding Notice of Claim and Dispute Resolution Period mentioned above, any Claim must be resolved by compulsory, final, and binding individual (not class) arbitration overseen by the Hong Kong International Arbitration Centre ("HKIAC") and in accordance with its prevailing Rules, which are deemed incorporated by reference into this clause.trustwallet.com
To raise any arbitration against Trust Wallet, a Notice of Arbitration must be filed and served in accordance with the HKIAC Rules within one (1) year from the date the user asserting the Claim first identified, or should have reasonably found out, the alleged act, omission, or default leading to the Claim ("Limitation Period").trustwallet.com
you must not be located in, or a resident, national, or entity established under the laws of any jurisdiction that is comprehensively sanctioned by the U.S., including but not limited to Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine;trustwallet.com
you can only use our Services if permitted under the laws of your jurisdiction. For the avoidance of doubt, you may not use our Services if you are located in, or a citizen or resident of any state, country, territory or other jurisdiction where your use of our Services would be illegal or otherwise violate any applicable laws.trustwallet.com
What the provider states it processes, and who it passes it to. Recorded because a wallet that never touches a key can still see every address you hold.
Please note that the IP address is used only on a transient basis, cannot be linked to any user’s personal data, and is not retained. The IP address’s sole purpose is to facilitate traffic and service redirection in compliance with regulatory requirements based on the user’s country. We neither store nor access the IP address.trustwallet.com
If you are our self-custody wallet user and you choose to interact with these third-party services, your personal information including your wallet address or payment card information may be disclosed to those Third Party Platforms.trustwallet.com
Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, user information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy notice (unless, of course, the user consents otherwise). Also, in the unlikely event that Trust Wallet or substantially all of its assets are acquired, users’ information will be one of the transferred assets.trustwallet.com
13. Public record
Matters of public record, taken from primary sources and stated with them. Both of the records below were disclosed by the provider itself or entered in a public vulnerability register, rather than found in the press.
A malicious build of the Trust Wallet browser extension, version 2.68, was published to the Chrome Web Store outside Trust Wallet's standard release process, using a Chrome Web Store API key that Trust Wallet says was leaked during the November 2025 Sha1-Hulud npm supply chain incident. Trust Wallet identified 2,520 affected wallet addresses and approximately 8.5 million US dollars in assets drained, and elected to reimburse affected users. The reimbursement claim process requires claimants to submit a scan of a government-issued identification document to a third-party KYC partner.
On December 24, 2025, an unauthorized and malicious version of the Trust Wallet Browser Extension (version 2.68) was published to the Chrome Web Store outside of our standard release process (without mandatory review). This version contained malicious code that, when loaded, allowed the attacker to access sensitive wallet data and execute transactions without authorization.
CVE-2023-31290. Trust Wallet Core before version 3.1.1, as used in the Trust Wallet browser extension versions 0.0.172 through 0.0.182, generated mnemonics from only 32 bits of entropy because the Mersenne Twister was seeded with a single 32-bit value, reducing the space to roughly four billion possible mnemonics. Exploited in the wild in December 2022 and March 2023.
Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the entropy is 32 bits, as exploited in the wild in December 2022 and March 2023.
14. Who should avoid Trust Wallet
Anyone who needs to know who they are contracting with. The terms name no company, no number and no registered address, so there is no counterparty this register can point you at and no companies register in which to look one up.
A reader should also weigh what the reimbursement after the December 2025 extension incident cost the people who claimed it: a scan of a government-issued identification document, submitted to a third-party identity partner, by users of a product marketed on never asking for personal information.
Related entries
Or read the whole wallet register, the card register, the same method applied to exchanges and to crypto casinos, the clause library at clause watch, or how this register works.
15. Sources
- Trust Wallet Terms of Service, last updated 1 January 2024
- Trust Wallet Privacy Notice, last updated 24 March 2025
- Trust Wallet homepage
- Trust Wallet About Us page
- Trust Wallet blog, Is Trust Wallet Safe, on Encrypted Cloud Backup
- Trust Wallet blog, What Are Passkeys, on SWIFT wallet recovery
- Trust Wallet blog, Introducing Cash App Pay Powered by MoonPay
- Trust Wallet browser extension v2.68 incident community update
- Trust Wallet support, Security Notice: Browser Extension Version 2.68 Vulnerability
- GitHub Advisory Database, CVE-2023-31290
- Binance announcement, Binance Acquires Trust Wallet, 31 July 2018
- Binance blog, Trust Wallet: Celebrating Two Years of Partnership, 31 July 2020