🚨 New Scam Targets @Ledger Wallet Owners with Physical Letters: What You Need to Know 🚨
A sophisticated new phishing scam is targeting Ledger hardware wallet owners by sending official-looking physical letters to their home addresses. This attack is specifically aimed at customers whose information was exposed in the 2020 Ledger database leak, which included names, addresses, and other personal details.
How the Scam Works 🕵️♂️📬
🔹 The letter appears to be from Ledger, using the company’s logo, business address, and even a reference number to look legitimate.
🔹 It claims there is a “critical security update” or “mandatory wallet validation” required due to a supposed security risk.
🔹 Recipients are instructed to scan a QR code, which leads to a fake website.
🔹 The website then asks for the user’s 24-word recovery phrase (seed phrase), claiming it is needed to “validate” or “upgrade” the device.
🔹 The letter threatens that failure to comply may result in restricted access to your wallet and funds.
Why This Is Dangerous ⚠️
🔹 If you enter your recovery phrase, scammers gain full control of your wallet and can steal all your crypto assets.
🔹 The scam is convincing because it uses real leaked customer data and professional-looking materials.
🔹 Some victims have also reported receiving tampered hardware devices in the mail, designed to install malware.
Official Warnings and Advice 🛡️
🔹 Ledger will never ask for your 24-word recovery phrase-not online, by email, phone, or physical mail.
🔹 If you receive such a letter, do not scan the QR code or enter any sensitive information.
🔹 Warn friends and family-especially those less experienced with crypto-about this scam.
🔹 If you’re ever unsure about a communication from Ledger, contact the company directly through their official website.
Background 🗂️
🔹 This scam leverages data from the July 2020 Ledger database breach, which exposed information of over 270,000 customers.
🔹 Scammers are now exploiting this data with physical mail, adding urgency and legitimacy to their phishing attempts.
Stay vigilant. Never share your recovery phrase. If someone asks for it, it’s always a scam! 🚫🔑