Ledger users encounter physical letter scams: forged notifications request registration of Bitcoin wallets through ZenLedger

According to Bitcoin News monitoring, German Ledger user @jayr_crypto reported receiving a forged letter again this week. The letter impersonates Ledger, claiming that new regulations require users to register their Bitcoin wallets through a service called ZenLedger by October 31. The letter uses official Ledger branding elements and mentions German financial regulators, while also including a QR code that directs users to a so-called mandatory registration process.

The user believes that addresses exposed in a previous data breach are being used for targeted attacks against Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend sales of its hardware wallets in a European retail network covering 11 countries and over 1,000 stores. Earlier reports indicated that malicious spy implants were found inside Ledger devices purchased from European retailers. Ledger also confirmed that compromised devices sold by a Southeast Asian distributor contained implants capable of stealing recovery phrases and transmitting them via cellular networks. Ledger has not yet confirmed any breaches of European devices. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks initiated using home addresses. Do not scan suspicious QR codes or enter recovery phrases.