Scammers Use Physical Phishing Methods to Target Ledger Wallet Users
Phishing Campaign Targets Ledger Wallet Users
A sophisticated physical phishing campaign has been identified, targeting users of Ledger hardware wallets with fake updates and QR codes.
Fake Letters and QR Codes
The letters appear to be genuine, complete with branded logos and fake security notices, aiming to trick recipients into divulging their sensitive 24-word recovery seed phrases, which grant access to their cryptocurrency wallets.
Previous Breach and Connection
Researchers believe the phishing campaign might be connected to the January 2026 breach of Global-e, Ledger’s e-commerce processing partner, which compromised customer shipping and regional order data.
Protecting Yourself
To protect themselves, affected users should refrain from scanning the QR code, visiting the linked site, and never entering a recovery phrase outside the initial wallet recovery process on a trusted device.
Those who have already submitted their seed phrase should transfer their funds to a newly created wallet with a fresh recovery phrase to prevent further exploitation.
About Author
English