House owners of Ledger {hardware} wallets have reported receiving faux bodily letters designed to trick them into revealing their pockets seed phrases as a part of a brand new wave of crypto scams.
On April 29, tech analyst Jacob Canfield posted a warning on X, sharing a rip-off letter that had arrived at his residence.
Disguised as official correspondence from Ledger, the letter instructed him to carry out a “crucial safety replace” by scanning a QR code and getting into his 24-word restoration phrase.
Ledger Rip-off Letter Mimics Official Mail With Brand and Reference Quantity
The professionally designed letter included Ledger’s emblem, a return tackle, and a reference quantity to lend credibility.
It warned that failure to finish the “validation” might lead to restricted entry to the person’s funds—an intimidation tactic meant to spur motion.
Ledger responded on to Canfield’s submit, confirming the letter was fraudulent and a part of a phishing try.
“Ledger won’t ever ask in your 24-word restoration phrase,” the corporate reiterated, advising customers to not belief unsolicited messages or people claiming to be Ledger representatives.
Seed phrases, usually 12 to 24 phrases lengthy, are essentially the most delicate element of a crypto pockets. Anybody who positive factors entry to them can take full management of a person’s property.
Some group members suspect the rip-off stems from Ledger’s notorious 2020 knowledge breach, when the private data of over 270,000 prospects—together with names, emails, and residential addresses—was leaked on-line.
You’re appropriate, this can be a rip-off. We recognize your efforts to warn others. Please keep vigilant towards phishing makes an attempt. Scammers impersonating Ledger and Ledger representatives are sadly frequent. Whereas we actively report and block scammers, we will't management what…
— Ledger (@Ledger) April 29, 2025
That incident was adopted by quite a few phishing campaigns, together with one by which tampered Ledger gadgets had been mailed to victims to put in malware.
The latest mail rip-off seems to be one other tactic concentrating on these affected by the breach, exhibiting how lengthy the results of knowledge leaks can linger within the crypto world.
Phishing Rip-off Targets Coinbase, Gemini Customers
In March, a number of crypto customers flagged subtle phishing rip-off emails, which focused Coinbase and Gemini customers with legit-looking fraudulent emails.
The mass e-mail reportedly arrived in varied person inboxes on Saturday. The rip-off mail pointed to a category motion lawsuit towards Coinbase for allegedly involving in unregistered securities, including that the court docket has mandated customers to transform their property into self-custody wallets.
Additional, the mail additionally confused that the deadline to switch person property to a self-custodial pockets is April 1st, 2025.
As reported, within the first three months of 2025, the crypto ecosystem misplaced a whopping $1,635,933,800 throughout 39 incidents, in response to the blockchain safety platform Immunefi.
The report claimed, “Q1 2025 marks the worst quarter for hacks within the historical past of the crypto ecosystem.”
Most of that was the results of solely two hacks of two centralized exchanges. Phemex suffered a $69.1 million loss in January, whereas Bybit misplaced $1.46 billion in February.
Subsequently, the entire variety of losses within the first quarter marks a 4.7x improve in comparison with Q1 2024. At the moment, hackers and fraudsters stole $348,251,217.
Notably, specialists assume that the notorious North Korean Lazarus Group is behind the 2 largest assaults. They stole $1.52 billion, which is 94% of whole losses.
The submit Crypto Scammers Go Previous College: Ledger Customers Hit with New Seed Phrase Mail Rip-off appeared first on Cryptonews.