Scammers sending out knock-off crypto wallets that could steal your coins

Ledger Nano X
(Image credit: Future)

Scammers have begun sending out fake hardware wallets to Ledger customers in an attempt to steal the cryptocurrency from their Bitcoin wallets.

According to a new report from BleepingComputer, a Reddit user who goes by the handle 'jjrand' recently made a post on the site explaining how they had received a Ledger Nano X hardware wallet in the mail. The shrink-wrapped package was emblazoned with the company's logo to make it appear more legitimate and contained an installation manual.

However, the package jjrand received, which they didn't place an order for with the company, also contained a letter from Ledger CEO Pascal Gauthier that explained the replacement device was sent out following a data breach that led to customer information being exposed on a popular hacking forum, which read:

"For this reason for security purposes, we have sent you a new device you must switch to a new device to stay safe. There is a manual inside your new box you can read that to learn how to set up your new device. For this reason, we have changed our device structure. We now guarantee that this kinda breach will never happen again.”

Phishing campaigns

After experiencing a data breach in July of last year, Ledger customers have been the target of multiple phishing campaigns launched by cybercriminals and scammers.

For instance, in December of 2020, the company's customers were targeted by a phishing campaign which used fake data breach notification emails to try and convince Ledger users to download the Ledger Live app. While the mobile version of the app in the links included in these emails was real, the desktop version wasn't and if a user installed it, the app would prompt them to enter both their recovery phrase and secret passphrase in order to gain access to their wallet and steal their crypto.

These ongoing phishing campaigns have become so frequent that Ledger created a list on its website to keep track of them all. In a statement to TechRadar Pro, the company's chief information security officer Matt Johnson provided further details on this latest scam, saying:

“We are aware of this scam, which we have included in our list of ongoing malicious attacks listed on our website. You should be suspicious of receiving a free product in the mail that you didn’t order and check Ledger’s official channels or contact Ledger support team. Ledger and Ledger Live will never ask you to share your 24-word recovery phrase. Finally, Ledger communicates securely through Ledger Live, never by mail or phone. We would never mail anything to your address without your consent.” 

Ledger customers should remain vigilant in order to prevent falling victim to this most recent scam as well as others designed to steal their cryptocurrency.

Via Vice

Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
Smartphone with new logo X twitter app background. Application twitter old blue bird change X black and white new.
Phishing campaign targets prominent X users, accounts at risk
A concept image of someone typing on a computer. A red flashing danger sign is above the keyboard and nymbers and symbols also in glowing red surround it.
Fake Reddit sites found pushing Lumma Stealer malware
Fraude en ligne phishing
Google forced to step up phishing defenses following ‘most sophisticated attack’ it has ever seen
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Trump
Hackers are abusing $TRUMP tokens to lure victims in to new phishing scam
Android phone malware
Screen reading malware found in iOS app stores for first time - and it might steal your cryptocurrency
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
Buzz Lightyear Space Ranger Spin Rennovations
Disney’s giving a classic Buzz Lightyear ride a tech overhaul – here's everything you need to know
Hisense U8 series TV on wall in living room
Hisense announces 2025 mini-LED TV lineup, with screen sizes up to 100 inches – and a surprising smart TV switch
Nintendo Music teaser art
Nintendo Music expands its library with songs from Kirby and the Forgotten Land and Tetris
Opera AI Tabs
Opera's new AI feature brings order to your browser tab chaos
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
The iPhone 16 Pro on a grey background
iPhone 17 Pro tipped to get 8K video recording – but I want these 3 video features instead