Your tokens are at risk of being stolen if you download a fake imToken App, and the tokens in the fake wallet need to be transferred ASAP. If you only have one mobile device, please follow this tutorial to transfer your tokens.

Note: If you have two mobile devices, please refer to this blog How to transfer tokens safely if you have two phones?

Warning: Your tokens are still at risk of being stolen if you make a mistake when transferring tokens(detailed explanations can be found at the end of the blog). Be sure you follow the tutorial below.

Back up the mnemonic of the fake App

1. Open the fake App, click “My Profile”-“Manage”-“Backup Wallet”, enter the password then write down the mnemonic (12 English words) on a piece of paper and verify the words again to ensure the correctness of the mnemonic.
image11.png

2. If you have a wallet other than your identity wallet, go to the "Manage your wallet" page, scroll up the page, find the wallet you created/imported, click "Backup Wallet", and then write down the mnemonic.
Make sure to back up both these wallets’ mnemonic phrases correctly!
image1.png

Download imToken 

Uninstall the fake App on your phone, then download real imToken from our official website: https://token.im. Be sure to check the website security certificate before downloading!

How to check the security certificate of a website?

If you download imToken from the Apple App Store, Please confirm that the developer of imToken is IMTOKEN PTE.LTD., and all others are fake Apps.

image7.png

Create an imToken wallet

1. Open imToken -> Click 'Create new Wallet', fill in your wallet name, set a password and password hint, then click 'Create' and 'add' an account. For instance, if your previous fake ETH wallet holds tokens that need to be transferred to the imToken wallet, then add an ETH account. Click here to learn what an account is.

2. Follow the prompts to write down the mnemonic (12 English words) on paper and store it securely. Then, confirm the mnemonic in order and click 'Next' to successfully create the wallet and enter the newly created account.

Note: Once someone gets your mnemonic, it is equivalent to controlling your wallet. Keep the mnemonic away from the internet and do not lose it. If you lose your mnemonic phrases, it can’t be retrieved.

The mnemonic (private key) is the only way to recover the wallet. Once lost, tokens cannot be retrieved, so please ensure its secure storage!

Moving tokens

1. Import risk addresses from the original fake wallet. Click on 'My Profile' - 'Manage wallets' - '+ Add Wallet' - 'Import existing wallets,' choose 'Mnemonic,' input the mnemonic of the fake wallet (12 English words), set a password, click 'Confirm,' then check 'Ethereum' network to add an ETH account.

2. Return to the wallet homepage, click on the wallet/account name at the top left corner, and switch to the new ETH account created in imToken (not the risk address of the fake wallet).

3. On the homepage of this newly created ETH account, copy the wallet address or click on 'Receive,' then click 'Copy' on the receiving page. Click on the wallet/account name at the top left corner, enter the 'Select Account' page, and find the risk ETH account address imported earlier.

4. Click 'Transfer,' select the token to be transferred, paste the copied new wallet address in the 'Recipient Address' row, enter the number of tokens, click 'Next,' and pay the miner fee. Then proceed to transfer all other tokens to the new wallet address following the same steps.

Note that ETH wallet transfers require ETH as miner fees, while Tron wallet transfers require TRX for energy and bandwidth consumption. If your wallet lacks ETH or TRX, purchase them from an Exchange and transfer them to the corresponding wallet.

5. After transferring all tokens from the ETH wallet to the new wallet, if you aslo have tokens in BTC, Tron, or other wallets that need to be transferred, repeat the 'Moving tokens' process, selecting the corresponding account on the 'Add Account' page. For example, check the 'Tron' network to add a TRX account.

6. Once all tokens from the original fake wallet address have been transferred to the new wallet, click on the '＞' on the homepage of the fake wallet address to enter the 'Account details' page, then click 'Remove'. Addresses used in fake apps pose risks, so do not use them again!

If you encounter any problem during the process, you can contact us via [email protected]. We’ll get you the help you need.

The 3 most common mistakes when moving tokens

Please note that your tokens are still at risk of being stolen if you make a mistake when transferring tokens.

1. Do not import the compromised addresses from the fake App into real imToken for continued use.

The mnemonic for addresses in the fake App has been leaked. So even if you import them into real imToken, your tokens are still at risk of being stolen. To ensure that your tokens are 100% safe, please create a new wallet with real imToken and uninstall the fake App after transferring all your tokens into the new wallet.

2. Do not create a wallet with the fake App you are currently using to then transfer the tokens from the old address to the new one.

Since you are still using a fake imToken, the newly generated mnemonic for the wallet will still be leaked. Therefore, your tokens in the wallet are still at risk of being stolen. 

3. Do not download a fake App from a scam website instead of the official website https://token.im.
If you download imToken through a third-party channel, or your friends or search engines such as Google, you are still highly likely to download a fake App.

We strongly recommend you to download imToken through our official website https://token.im. And remember to check the website security certificate before the download. You can find the tutorial on how to check the certificate in this blog.