Crypto Thieves Go Old-School: Mail Scam Hits Ledger Users

Cryptos: 21,330
Exchanges: 1,862
Market Cap: $3.38T 1.31%
24h Vol: $420,105,215,607 40.80%
Dominance: BTC: 60.4% ETH: 8.9%
Gas: 8 GWEI

Connect

Crypto News Exploits

Crypto Thieves Go Old-School: Ledger Users Hit by Mail Scam

Written by Aaron S.,

Editor-In-Chief

Last Updated: April 30, 2025

Key Takeaways

Scammers are sending fake Ledger letters by mail, which urge users to reveal their 24-word recovery phrases.
The scam uses Ledger’s logo and address to appear real and threatens wallet access loss;
Ledger confirmed that the letters are scams and reminded users never to share their 24-word phrase.

Ace quick missions & earn crypto rewards while gaining real-world Web3 skills. Participate Now ! 🔥

Crypto Thieves Go Old-School: Ledger Users Hit by Mail Scam

BITDEGREE IN YOUR SOCIAL FEED

Ledger wallet owners are being targeted by a new scam that arrives not by email or text, but through the mailbox.

Fake letters are being sent to people's homes, pretending to be official messages from Ledger, and asking users to enter their private recovery phrases.

On April 29, Jacob Canfield, the founder of TradingMastery.io, posted a photo of one of these letters in a post on X. It looked official, using Ledger’s logo, company address, and a reference number.

Bullish vs Bearish Markets: How to Predict it? (Animated)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

The letter claimed that the user needed to complete a "critical security update". It directed him to scan a QR code and enter his 24-word recovery phrase—the only way to access a crypto wallet. It also warned that failing to follow the instructions could limit access to his wallet and funds.

That recovery phrase, if shared, gives full control over the wallet. Scammers who obtain it can quickly transfer the crypto, which leaves the owner with no way to recover it.

Ledger responded to Canfield’s post in a comment, "Ledger will never call, DM, or ask for your 24-word recovery phrase. If someone does, it's a scam". They also urged people not to interact with anyone claiming to be a Ledger employee or offering to help recover funds.

On April 18, Kaspersky, a cybersecurity firm, reported that a group of attackers had spread harmful software called ClipBanker. What is it? Read the full story.