Unauthentic Security Letters Circulating, Asking for Recovery Phrases from Ledger Users
Crypto Hardware Wallet Scam Alert: Phishing Letters Targeting Ledger Users
Hey there! Here's another heads-up for the cryptocurrency community. Ledger, a popular hardware wallet company, is on the lookout for a new phishing scheme making its rounds. This scam involves physical letters aimed at stealing wallet credentials. So, users, be on your toes and ignore any request related to recovery phrases.
What's Going On?
Ledger has issued an alert about a wave of forged letters being sent to customers. These letters seek to lure recipients to a phishing website, where they're asked to submit their recovery phrases under the pretext of validating their wallets.
One of the alleged letters reads:
“We are reaching out to you due to a vital security update, which requires your immediate attention... All users must validate their wallets using their recovery phrase to guarantee continued and secure access to their Ledger devices.”
What's the Deal with Those Recovery Phrases?
Ledger promptly addressed the situation, clarifying that the letter is bogus and urging customers to steer clear of entering their 24-word recovery phrases. Remember, your recovery phrase is the sole key to your funds, and it should never be divulged.
Scammers and Their Tricks
This isn't the only tactic employed by scammers targeting Ledger users. Some imposters have also attempted to contact users through social media or phone, all while using real names, convincing bios, or professional language to deceive wallet holders.
Ledger makes it clear that it doesn't reach out to customers via phone for support, nor does it request wallet credentials. If there are any technical issues, users are encouraged to interact only with Ledger's official support squad.
Key Points to Remember
Remember, Ledger will never contact you by phone for support, nor will they request wallet credentials. Always verify communications through official channels and never enter your seed phrases via QR codes or unfamiliar links. Stay vigilant, and if you come across any suspicious individuals offering to help recover your funds, remember—it's a scam!
On the Bright Side
Although scammers may be persistent, phishing attempts can be avoided. By remaining cautious and following the safety guidelines from companies like Ledger, you can secure your wallets effectively. Keep that crypto safe!
[1] "Ledger warns of new phishing scam" - Coin Telegraph, 16th September 2022[2] "Ledger issues warning over new phishing scam" - The Block, 16th September 2022[3] "Stay informed about scams and phishing attempts" - Ledger Support[4] "Exposed Ledger customer data used in new phishing attacks" – ZDNet, 13th August 2020[5] "Ledger's Twitter thread addressing new phishing scam" – Ledger Support, 16th September 2022
- Regardless of the authenticity of the communicator's information, such as real names or professional language, users should be skeptical about unsolicited contacts involving their Ledger wallets, as scammers are known to utilize technology and social media to deceive.
- In the event of any technical issues with the Ledger hardware wallet, it is recommended to interact only with Ledger's official support team and to steer clear of entering recovery phrases via QR codes or unfamiliar links, as these methods may lead to cybersecurity risks.
- As a precautionary measure, users must be vigilant when receiving letters, messages, or phone calls claiming to be from Ledger, even if they seem legitimate. Companies like Ledger emphasize that they do not reach out to customers via phone for support or to request wallet credentials, and it's essential to always verify communications through official channels to avoid phishing attempts.
