Industry exec sounds alarm on Ledger phishing letter delivered by USPS

Ledger Phishing Scam Targets Crypto Users via Physical Mail

A sophisticated phishing campaign is targeting cryptocurrency users through physical mail, impersonating the reputable hardware wallet manufacturer, Ledger. The scam involves letters sent via the United States Postal Service (USPS), urging recipients to “validate” their wallets under the threat of losing access to their funds. These letters contain QR codes, which likely redirect to malicious websites designed to steal sensitive information.

Multiple individuals have reported receiving these fraudulent letters, highlighting the widespread nature of the attack. One such recipient, Troy Lindsey, publicly warned others about the scam, emphasizing the need for vigilance. BitGo CEO Mike Belshe also shared an image of the scam letter on social media, further raising awareness of the ongoing phishing attempt. While Cointelegraph reached out to Ledger for comment, no response was received by the time of publication.

This incident underscores the escalating sophistication of social engineering scams targeting the cryptocurrency industry. These attacks exploit human psychology to manipulate users into revealing their private keys, compromising their funds and sensitive data. The use of physical mail adds a new dimension to these scams, potentially bypassing typical online security measures.

The scale of cryptocurrency-related phishing attacks continues to grow, with significant financial losses reported. In April 2025, a phishing attack resulted in the theft of $330 million in Bitcoin from an elderly individual, as confirmed by on-chain detective ZackXBT. The investigation implicated two suspects, one operating a call scam center in the UK and another assisting with the malicious website.

This latest Ledger impersonation scam, coupled with previous high-profile attacks like the Coinbase data breach and various other phishing attempts, reinforces the critical need for heightened security awareness among cryptocurrency users. Individuals should remain vigilant, exercise caution when interacting with unsolicited communications, and never click on links or scan QR codes from unknown sources. Regularly reviewing security practices and employing robust security measures are crucial to mitigate the risks associated with these evolving threats.