Blog

Ledger scammers send letters to steal seed phrases


Scammers send physical letters to those who have Ledger Crypto hardware wallets asking them to prove their private seed phrases in a bid to access the wallets to clean them.

In a post of April 29 x, tech commentator Jacob Canfield shared a Scam letter Sent to his home by post that appears from the Ledger saying he needs to immediately conduct “critical security updates” on his device.

Letter, which uses Ledger logo, business address, and a reference number to be legitimate, requests to scan a QR code and enter the private purse recovery phrase Under the guise of device validation.

The letter threatens to “the failure to complete the mandated proof process that may result in restriction accessing your purse and funds.”

Source: Jacob Canfield

A seed phrase, or recovery phrase, is a string of up to 24 words that open access to a crypto purse. A scammer with a phrase can access and control the associated purse to move its handles elsewhere.

Earlier this month, the X account of a crypto hardware wallet reseller Says It also received many reports by Ledger users receiving a similar letter.

In response to Canfield’s post, Ledger Says Letter is a scam and warns device users to remain vigilant PHishing attempts.

Related: Ledger Wallet User Reports 10 BTC Loss – The community blames phishing

“Ledger will not call, DM (direct message), or request your 24-word phrase recovery. If someone, this is a scam,” he added.

“Please do not engage in accounts that say ledger employees or anyone who offers to help recover funds.”

It is unclear if connected to leakage of ledger data

Canfield suggested that scammers are sending letters to Ledger customers whose data has been scattered nearly five years ago.

In July 2020, a hacker Breached Ledger’s Database and discard personal information of more than 270,000 of its customers online, which includes names, phone number and home addresses

The following year, many Ledger users said to be -mail Ledger’s fake devices That is to be -adopted and designed to install malware when used, bleeding computer reported At the time.

Magazine: Your AI ‘Digital Twin’ can take meetings and entertain your loved ones