Ledger scammers are stealing mnemonic phrases by sending postal letters

ChainCatcher news, according to Cointelegraph, a recent offline phishing scam targeting Ledger hardware wallet users has emerged, with scammers requesting victims to verify their recovery phrases through postal letters.

On April 29, tech commentator Jacob Canfield exposed a forged "Ledger Security Update Notification" letter on the X platform, which contained a branded QR code that lured users into entering their 24-word recovery phrase.

Ledger's official response emphasized: "We will never ask for your recovery phrase in any way."

This scam may be linked to the Ledger user data breach incident in July 2020, when the names, phone numbers, and addresses of over 270,000 users were exposed by hackers. Reports in 2021 indicated that some users received counterfeit hardware wallets preloaded with malware.

Experts remind: Any request for recovery phrases is a scam, and physical isolation is the core security advantage of hardware wallets.