8h ago
Postal phishing campaign impersonates Ledger and Trezor to steal seed phrases
According to the report, scammers are mailing hardware wallet users letters that mimic Trezor and Ledger notices, pushing recipients to scan QR codes and enter recovery phrases. The messages cite urgent security checks and route to clone setup pages that accept 12-, 20-, and 24-word seeds. Hardware wallets are not compromised, but revealing a seed enables immediate wallet takeover.