Weird, for what I know Aegis does not requires signup/login, the info it's stored in your phone. Could the phone be compromise then? ~security ~privacy ?

If you could describe in detail the whole process and what you were trying to do, it will help HodlHodl team prevent such things in the future and hopefully help others identify and avoid similar scammers.