# ISCAM WARNING: lost $3 million because of “SamFwToolSetup\_v5.4.zip.”

**URL:** <https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565>\
**Category:** Support\
**Created:** [July 2, 2026, 8:34am UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565 "2026-07-02T08:34:07Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![samfwscam](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/samfwscam/32/39680_2.png) [@samfwscam](https://community.metamask.com/u/samfwscam)\
**Post date:** [July 2, 2026, 8:34am UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565/1 "2026-07-02T08:34:07Z")

</div>

I’m issuing a public warning: do not install the scam software called “SamFw FRP Tool,” which advertises “Remove FRP with one click” and “Change CSC with one click.” It may work, but it also contains hidden malware.

The malware can secretly install on your computer, search your private files, and if it finds private keys or a crypto wallet, it steal them and wipe your data. I’m one of the victims I lost $3 million because of a dangerous file called “SamFwToolSetup\_v5.4.zip.” The same day my wallet was drained. After that, they updated the software to “SamFwToolSetup\_v5.5.1.zip.”

You might ask how I trusted this tool and installed it. Many posts and videos on the internet claim the tool is “false positive” and has no malware, but that isn’t what happened to me. This appears to be a smart scam from a Vietnamese scammer named Tungtata. He sometimes releases “clean” versions and sometimes releases versions with malware—so it’s harder to detect and harder for people to notice the pattern.

After I downloaded the software from samfw com, I became a victim, and I’m warning everyone to stay away. This scammer is real, and he stole from me.

---

<div class="post-metadata">

**Author:** ![discourse\_ai\_spam](https://avatars.discourse-cdn.com/v4/letter/d/c68b51/32.png) [@discourse\_ai\_spam](https://community.metamask.com/u/discourse_ai_spam)\
**Post date:** [July 2, 2026, 8:34am UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565/2 "2026-07-02T08:34:19Z")

</div>

Unlisted on July 2, 2026, 8:34am UTC



---

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/metamask/original/3X/3/8/3812168020a49f264784b1dbfcf12435abbb09ad.png) [@system](https://community.metamask.com/u/system)\
**Post date:** [July 2, 2026, 11:29pm UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565/3 "2026-07-02T23:29:01Z")

</div>

Listed on July 2, 2026, 11:29pm UTC



---

<div class="post-metadata">

**Author:** ![Khaled1](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/khaled1/32/39657_2.png) [@Khaled1](https://community.metamask.com/u/Khaled1)\
**Post date:** [July 3, 2026, 1:26am UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565/4 "2026-07-03T01:26:51Z")

</div>

Thank you for your report. As you know, unfortunately there is nothing that can be done to recover the stolen funds because blockchain transactions are irreversible.  
Could you please follow MetaMask’s official guidance and complete the recommended steps, including reporting the scammer’s wallet address to MetaMask Support and taking any other actions outlined in their instructions?

> **[How to report a scam | MetaMask Help Center](https://support.metamask.io/stay-safe/protect-yourself/how-to-report-a-scam/)**
>
> Steps to take after falling victim to a crypto scam, including how to report it to MetaMask Support, Etherscan, and local cybercrime authorities.

---

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/metamask/original/3X/3/8/3812168020a49f264784b1dbfcf12435abbb09ad.png) [@system](https://community.metamask.com/u/system)\
**Post date:** [August 1, 2026, 8:34am UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565/5 "2026-08-01T08:34:40Z")

</div>

Closed on August 1, 2026, 8:34am UTC

This topic was automatically closed after 29 days. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/metamask/original/3X/3/8/3812168020a49f264784b1dbfcf12435abbb09ad.png) [@system](https://community.metamask.com/u/system)\
**Post date:** [August 1, 2026, 8:34am UTC](https://community.metamask.com/t/iscam-warning-lost-3-million-because-of-samfwtoolsetup-v5-4-zip/31565/6 "2026-08-01T08:34:43Z")

</div>

Opened on August 1, 2026, 8:34am UTC


