Ledger Sounds Alarm: Scam Letters Targeting Crypto Users’ Seed Phrases in Wild

Hardware wallet giant Ledger fires warning shots—fraudsters are mailing fake ’security alerts’ demanding seed phrases. Classic ’give us your keys’ scam, now with postal service efficiency.

How it works: Victims receive physical letters impersonating Ledger, complete with ominous warnings about ’compromised devices.’ The hook? A demand to hand over recovery phrases—the crypto equivalent of handing a burglar your safe combination.

Why it matters: Seed phrases are the ultimate backdoor. Disclose them, and your crypto might fund some scammer’s Lambo—while you’re stuck explaining to the FSA why your life savings now live on a Seychelles-bound blockchain.

Bottom line: If any letter, email, or ’support agent’ asks for your seed phrase, it’s a scam. Even your bank wouldn’t be this blatant—and that’s saying something.

• Ledger users are being targeted by scammers sending fake physical letters that mimic official communications, asking for their seed phrases.

• The scam letters appear legitimate, using Ledger’s logo, business address, and threats of account deactivation to pressure recipients.

• This phishing attempt may be connected to the 2020 Ledger data breach that exposed over 270,000 customers’ personal details, including home addresses.

There’s a new crypto scam in town, and it involves sending physical letters to individuals who own Ledger crypto hardware wallets. In the letter, the perpetrators are asking these individuals to confirm their private seed phrases.

If they do, the scammers will access their wallets and withdraw all their funds. Recently, tech commentator Jacob Canfield shared his experience of receiving one of such letters on X.

According to him, he received the letter in his home post box, and the letter looks it is truly from the crypto hardware wallet provider. The letter claimed that there’s a need to validate Canfield’s device and that he should  scan a QR code and enter his wallet’s private recovery phrase.

As a proof of that the letter was not fake, it had Ledger’s logo, business address and a reference number. The letter also stated that Canfield could lose access to his wallet and funds should he fail to comply with the ‘validation process.’

Source: X (@JacobCanfield)

A seed or recovery phrase contains up to 24 words that open access to a crypto wallet. Hence, anyone (including a scammer) with a wallet’s seed phrase can access it, perform transactions or transfer funds out of the wallet.

Ledger responded to Canfield’s tweet, stating that the letter is a scam and warned its users to be on guard against phishing attempts.

 Is There a Possible Connection to the Ledger Data Leak?

Canfield claimed that the company’s customers whose data were leaked about 5 years ago were the largest receivers of these scam letters. Five years ago, Ledger admitted that a hacker accessed its database illegally and released the personal information of over 270,000 of the firm’s customers online.

The information included the customers’ home addresses, phone numbers and names. A year later, a report by Bleeping Computer claimed that many Ledger users stated that they received Ledger devices in their post boxes without requesting them.

The report added that the design of the devices had been modified and contained malware which would become active upon use.