Connect with us

Crypto World

Fake Trezor, Ledger letters target crypto wallet recovery phrases

Published

on

crypto wallet phishing letters

Crypto hackers are sending physical letters impersonating Trezor and Ledger to steal cryptocurrency wallet recovery phrases.

Summary

  • Hackers mail fake Trezor and Ledger letters with phishing QR codes.
  • Sites request recovery phrases and grant attackers full wallet control.
  • Hardware wallet firms never ask users to share seed phrases.

The phishing campaign claims recipients must complete mandatory “Authentication Check” or “Transaction Check” procedures.

The hackers are also creating urgency through deadlines of February 15, 2026 for Trezor. Letters printed on official-looking letterhead direct users to scan QR codes leading to malicious websites.

Advertisement

The phishing sites request 24-, 20-, or 12-word recovery phrases under the pretense of verifying device ownership.

Once entered, recovery phrases transmit to threat actors through backend API endpoints, granting attackers full control over victims’ wallets and funds.

Both hardware wallet companies suffered data breaches in recent years that exposed customer contact information.

Advertisement

Phishing sites create urgency through functionality warnings

Cybersecurity expert Dmitry Smilyanets received a fake Trezor letter warning that failure to complete authentication would result in lost device functionality.

“To avoid any disruption to your Trezor Suite access, please scan the QR code with your mobile device and follow the instructions on our website,” the letter stated.

The Trezor phishing site displays warnings about limited access, transaction signing errors, and disruption with future updates.

crypto wallet phishing letters
Physical crypto phishing letters

A similar Ledger-themed letter circulated on X, claiming Transaction Check would become mandatory.

The phishing pages allow users to enter recovery phrases in multiple formats, falsely claiming the information verifies device ownership and enables authentication features.

Advertisement

Once victims enter recovery phrases, data transmits to the phishing site. Attackers import the wallet onto their own devices and drain funds.

The letters create false urgency by claiming devices purchased after November 30, 2025 come pre-configured, pressuring earlier buyers to act.

Crypto hardware wallet companies never request recovery phrases

Physical mail phishing campaigns targeting hardware wallet users remain relatively rare. Crypto hackers mailed modified Ledger devices in 2021 designed to steal recovery phrases during setup. A similar postal campaign targeting Ledger users was reported in April.

Advertisement

Anyone possessing a wallet’s recovery phrase gains full control over the wallet and all funds. Trezor and Ledger never ask users to enter, scan, upload, or share recovery phrases through any channel.

Recovery phrases should only be entered directly on hardware wallet devices when restoring wallets, never on computers, mobile devices, or websites.

The targeting criteria for the physical letters remains unclear. However, both companies’ past data breaches exposed customer mailing addresses and contact information to potential attackers.

Advertisement

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

MoonPay adds Ledger-secured AI crypto agents to deal with wallet key risks

Published

on

MoonPay unveils AI onramp for brave new agent economy

Crypto payments firm MoonPay added Ledger hardware wallet signing to its command-line interface (CLI) wallet for MoonPay Agents, a move the company says addresses a security challenge introduced by autonomous crypto trading tools.

The new feature allows users to verify and sign every transaction generated by an AI agent using a Ledger hardware device, ensuring private keys never leave the hardware signer. MoonPay said the integration makes the CLI wallet the first agent-focused wallet to support Ledger’s secure signing through the company’s Device Management Kit.

Autonomous crypto agents are a growing category of tools designed to execute trading strategies, rebalance portfolios and move assets across chains without constant human input. But security concerns have slowed adoption, because many implementations require users to hand over direct access to wallet keys.

“Autonomous agents will manage trillions in digital assets,” said Ivan Soto-Wright, CEO and founder of MoonPay. “But autonomy without security is reckless. We built MoonPay Agents with Ledger so intelligence can scale without surrendering control. The agent executes. The human stays in the loop.”

Advertisement

Ledger’s chief experience officer, Ian Rogers, said the integration reflects the growing number of developer-focused wallets and AI-driven tools entering crypto.

“There is a new wave of CLI and agent-centric wallets emerging, and these will need Ledger security as a feature, too,” Rogers said.

Read more: Your AI is getting a bank account: MoonPay just gave bots the power to spend money

Source link

Advertisement
Continue Reading

Crypto World

Olivier Janssens’ Nevis Project Offers Residents $100 a Month

Published

on

Olivier Janssens’ Nevis Project Offers Residents $100 a Month

Belgian-born crypto millionaire, Olivier Janssens, reportedly offered to pay Nevis residents $100 per month if the government approves his development plans for a tech-friendly libertarian community on the Caribbean island.

Jannsens’ Destiny, a project aiming to buy and restructure about 2,400 acres of land on the Caribbean island, said it will begin paying residents $100 per month, “immediately once the final agreement with the government is approved,” according to an email seen by the Financial Times. 

The monthly $100 figure is an increase from the initial 30 East Caribbean dollars (US$11) announced by the project in November 2025.

The offer drew sharp criticism from opponents of the project, who said it amounted to an attempt to influence public opinion and government approval.

Advertisement

Kelvin Daly, a member of the Nevis Reformation Party (NRP), condemned the move for allegedly pressuring authorities into accepting the development plans. “Janssens and De Primer have upped their bribe from US$30/month to US$100/month,” wrote Daly in a Facebook post on Monday.

“This is influence buying, a clear attempt by a private developer to interfere in the domestic socioeconomic and political affairs of our country.”

Daly urged authorities to investigate the initiative for breaches under the Anti-Corruption Act.

Project Destiny, preview. Source: Destiny.com

Destiny is seeking approval under St. Kitts and Nevis’ Special Sustainability Zones framework, a legal regime passed in 2025 that enables projects of this kind.

The initiative plans to invest $50 million into Nevis’ infrastructure to fund hospitals, health centers, villas, and create more jobs, while sharing 10% of the profit with citizens and 10% with Nevis’ sovereign wealth fund.

Cointelegraph has approached Destiny for comment on the approval timeline of the project.

Advertisement

Related: Trump Organization to tokenize Maldives resort development for early investors

Crypto founders building their own cities in “ultimate exit” plan

Janssens was an early Bitcoin investor and briefly served on the Bitcoin Foundation’s board in 2015, when he publicly said the organization was “effectively bankrupt.”

Former Coinbase exchange chief technical officer, Balaji Srinivasan, announced a similar initiative at the Network State Conference in Singapore in October 2025.

During his speech, he urged crypto and tech enthusiasts to collectively buy land and create more tech-friendly communities, positioning it as Silicon Valley’s “ultimate exit” from “failing” US institutions.

Advertisement

Srinivasan also shared a document that showed a total of 120 “start-up societies” in development worldwide.