Update, 2 November
Scam phone calls
The attackers behind the recent phishing emails are now also calling Foundation customers. These calls are not from us. Foundation will never call or email you asking for your recovery phrase, and we never make unexpected calls about your wallet.
What the callers are doing:
- They claim to be Foundation support, using names such as “Robert Owens”, “Douglas” and “Jonathon”, and sometimes pass you to a second caller posing as a manager.
- They quote personal details to sound convincing, such as your name, address, phone number, order number and when you bought your Passport. Some also quote the last 4 digits of the card you paid with.
- They say your device has a manufacturing fault or is part of a recall, and offer a free replacement, a refund or a new wallet.
- They give you a reference number, such as FD272501AU, and may ask you to repeat it back.
- They ask you to “verify” your recovery phrase, log in to a website such as foundation[.]holdings, or move your funds into “their vault”. Some say you can’t get a replacement until you’ve set up the vault.
- Some calls are automated messages about a “security notice” asking you to press 1.
Numbers reported so far include +1 850-930-4100, +1 404-453-9954 and +1 407-288-0298, as well as private or blocked numbers. Callers can change or fake the number they call from, so a familiar-looking number doesn’t mean the call is genuine.
There is no recall or replacement program
If a device you didn’t order arrives, don’t turn it on or connect it, and never enter your recovery phrase on it. Take a photo of the packaging and label and email us at hello@foundation.xyz.
Phishing emails and fake websites are still active
The emails from newinblue[.]com and auguste[.]io, and the website foundation[.]holdings, are still in use. Expect new senders and stories as well.
Fake investment offers
Scammers posing as the International Trade Centre (“Austin Cole”, “Mary Foster” and “Julian Friss”, using itcswisssupport[.]com) are telling people to buy our Concierge Pro service as a “machine needed to trade” and to install AnyDesk. Foundation doesn’t offer trading or investment services, and anyone who contacts you out of the blue offering them is a scammer.
How to protect yourself
- If anyone calls claiming to be Foundation, hang up.
- Never share your recovery phrase or type it into a website, form or app. It belongs only on your Passport and your own backups.
- Don’t install software that anyone asks you to, such as AnyDesk.
- If you’re unsure about any message or call, type foundation.xyz into your browser yourself and contact us at hello@foundation.xyz.
If you’ve shared your recovery phrase with anyone, move your funds right away to a new wallet with a new recovery phrase, set up on a device you trust, and then contact us.
Our investigation is ongoing, and we’ll keep sharing updates here and by email.