Ledger Warns Users of Physical Letter Scam Impersonating Security Upgrades

Hardware wallet manufacturer Ledger has alerted users to a sophisticated phishing campaign involving physical letters sent to recipients from a leaked address database. The fraudulent correspondence, masquerading as official company communications, urges recipients to upgrade their devices citing fabricated security risks.

Crypto influencer Jacob Canfield exposed the scheme on X (formerly Twitter), sharing an image of the counterfeit letter. The scam leverages Ledger’s 2020 data breach, repurposing stolen customer information for targeted attacks. "Be very cautious and warn any friends or family in crypto who might not be savvy," Canfield cautioned in his viral post tagging Ledger’s official account.

This incident marks an escalation in crypto phishing tactics, shifting from digital-only scams to hybrid physical-digital approaches. Ledger’s security team has yet to disclose the scale of the ongoing operation but confirms active monitoring of the situation.