Fake Letters Target Ledger and Trezor Users for Seed Phrases

[ed]

Users of hardware wallets from Ledger and Trezor are once again being targeted by physical mail phishing scams designed to steal recovery phrases.

Cybersecurity expert Dmitry Smilyanets reported receiving a fraudulent letter posing as an official notice, urging recipients to complete an “Authentication Check” or risk device restrictions. The letter included a hologram and QR code to appear legitimate and was falsely signed as “Ledger CEO” Matěj Žák — who is in fact the CEO of Trezor.

The scam attempts to create urgency, pushing users to act quickly without verifying authenticity — a classic social engineering tactic.

[cryptobro]

always verify before scanning qr codes or signing anything, literally crypto 101