Trezor has urged customers who purchased its hardware wallets from former authorized reseller CryptoBilis since March 2026 to move cryptocurrency into newly created wallets using new recovery phrases. The warning followed a report from Indonesia involving a Trezor Safe 5 bought on Tokopedia in August 2026 that allegedly contained an unauthorized circuit board, cellular module and antenna. The suspected implant could capture information displayed on the device, including recovery phrases, and transmit it over a mobile network when powered. Trezor said it had not physically examined the device but considered the report credible, and no related losses have been reported. The company has not determined where the suspected tampering occurred and said seals and packaging are not sufficient safeguards on their own. The warning follows reports of losses involving Ledger wallets sold through CryptoBilis; Ledger confirmed unauthorized hardware tampering in one affected device. Trezor is arranging laboratory testing, advising customers not to use unused devices or reuse potentially exposed recovery phrases, and offering eligible buyers replacement devices or vouchers.