If Your TRON Permissions Were Hijacked, Do This First
The moment you suspect an account's permissions have been reassigned, the priority shifts from recovering what's already gone to stopping any further loss.
Stop sending anything further
If you've been sending TRX into an account you no longer control, stop immediately. Every deposit is available to whoever actually holds Owner or Active permission now — continuing only adds to the loss.
Confirm what actually happened
Check the account's permissions with a checker tool to confirm whether a foreign key is present, and review the account's transaction history for the AccountPermissionUpdate transaction and its timing — this establishes a clear record of what occurred and when.
Document everything
Save the account address, relevant transaction hashes, and any messages or seed phrase you were given as part of the scam. This record matters if you report it to an exchange, to TRON's community security channels, or to local authorities.
Report it
If any funds passed through a centralized exchange at any point — either the scammer's side or your own — report it to that exchange's support team; some maintain processes for flagging known scam addresses, even without a guarantee of fund recovery.