Originally published on: December 18, 2024
Reports from Ledger users indicate that phishing scammers are cleverly impersonating the popular crypto hardware wallet provider’s support emails. The scammers aim to deceive users into disclosing their wallet keys by sending out bogus emails claiming that Ledger has experienced a recent data breach.
These misleading emails urge recipients to verify their private seed phrases under the pretense of protecting their assets, as screenshots from X and a recent report by BleepingComputer reveal. Despite appearing to be from Ledger’s official support email, it has been discovered that the emails were actually sent through an email marketing service.
Upon clicking the links in the email, users are directed to a convincing Ledger-branded website that prompts them to “verify your Ledger” in order to check for any potential compromises to their device. However, this prompt is merely a trap designed to trick users into entering their seed phrases, granting the scammers full control over their wallets and allowing them to drain their funds.
In response to user concerns, Ledger emphasized that they will never request a 24-word recovery phrase via phone call, direct message, or any other means, highlighting the importance of staying vigilant against such scams. Although it remains unclear if any Ledger users have fallen victim to this phishing scheme, it serves as a stark warning to the crypto community.
This incident follows a recent case where a Ledger user reportedly lost $2.5 million in Bitcoin and non-fungible tokens due to a phishing scam. Blockchain security firms have reiterated the importance of safeguarding sensitive information and remaining cautious during the holiday season, which tends to see an increase in online transactions and fraudulent activities.
As phishing scams continue to pose a threat to crypto enthusiasts, it is crucial to stay informed and vigilant to protect your digital assets. Stay tuned for more updates on cybersecurity measures and best practices in the ever-evolving world of crypto security.