The user, a Connecticut resident, received a letter purporting to be from “Ledger Security & Compliance,” instructing them to perform a mandatory security check. In fact, following the instructions in the letter enabled the fraudsters to compromise the user's hardware wallet, making off with $234,000 in cryptocurrency.
Decrypt reached out to Ledger for comment on the case but did not immediately receive a response.
Hardware Wallet Owners Hit With Snail Mail Phishing Campaign
At the time, cybercrime consultant David Sehyeon Baek told Decrypt that scammers’ shift from digital to physical mail “borrows credibility” from the postal system. “A letter with your name and home address basically signals, 'we can locate you,' and that triggers a much stronger safety reaction,” he explained.
