Be careful with e-mails from "Ledger"

[rdluffy]

Some users are receiving e-mails like this, clearly not from Ledger, but scammers are trying to use Ledger's name


Source: https://x.com/polymutex/status/1846413622093697349

Be careful guys, do not click in any kind of e-mail like this, always check first in foruns, X, Discord etc
Official ledger X: https://x.com/Ledger

[Mia Chloe]

Some users are receiving e-mails like this, clearly not from Ledger, but scammers are trying to use Ledger's name
Be careful guys, do not click in any kind of e-mail like this, always check first in foruns, X, Discord etc
Official ledger X: https://x.com/Ledger

Nice of you to drop this thread here mate. Ledger phishing and scam mails aren't much of a new thing these days. It's however unfortunate that some people still fall victims of these kind of phishing attempts but I believe threads like this should stir up awareness to those that would likely fall victims of these incidents.

I really don't advice anyone to make use of ledger hardware wallets, let's infact just say that during some time in the past, people used to suggest ledger as a good hardware wallet but everything changed when they decided to implement a cloud storage for their users keys. Like how then can someone with his keys on a cloud boldly say he own those coins?

[Lucius]

~snip~
I really don't advice anyone to make use of ledger hardware wallets, let's infact just say that during some time in the past, people used to suggest ledger as a good hardware wallet but everything changed when they decided to implement a cloud storage for their users keys. Like how then can someone with his keys on a cloud boldly say he own those coins?

In the same way that everyone who has their coins on CEX will say that they own them - and in fact they have nothing but their password and their ID with which they access the service. Ledger essentially only provides a Recovery service for those who pay for it, and there are always those who do not understand what "not your keys, not your coins" means.

What we can all agree on is that every e-mail and its content should be considered dangerous until proven otherwise.

[Mia Chloe]

In the same way that everyone who has their coins on CEX will say that they own them - and in fact they have nothing but their password and their ID with which they access the service. Ledger essentially only provides a Recovery service for those who pay for it, and there are always those who do not understand what "not your keys, not your coins" means.
What we can all agree on is that every e-mail and its content should be considered dangerous until proven otherwise.

That's true. Many people really don't know what the phrase "not your keys not your coins " really means. One of the lamest things to think is that the keys you stored on some cloud is still yours. Infact as bitcoiners we are constantly looking for ways to keep our keys off the internet as much as possible because of the numerous vulnerabilities that the internet poses on the security of our coins.

Be it a decentralised exchange or a centralised exchange, it's still not safe to store your coins there since you don't literally control your keys. For some reason people tend to trust CEX because of their KYC verification which is even worse.

[Crwth]

That must’ve been from the leak that ledger has with the customers. It is important to check who sent it so that you could verify if it is legitimate or not.

Thank you for sharing OP.

[rdluffy]

...

Nice of you to drop this thread here mate. Ledger phishing and scam mails aren't much of a new thing these days. It's however unfortunate that some people still fall victims of these kind of phishing attempts but I believe threads like this should stir up awareness to those that would likely fall victims of these incidents.

I really don't advice anyone to make use of ledger hardware wallets, let's infact just say that during some time in the past, people used to suggest ledger as a good hardware wallet but everything changed when they decided to implement a cloud storage for their users keys. Like how then can someone with his keys on a cloud boldly say he own those coins?

Thanks!
I have a Ledger Nano S.

I also didn't agree with the terms of service of the Ledger that offered that seed recovery service through the cloud, but fortunately it's an optional service
I just had a big question over whether or not the seed could be recovered by the device, which until then had been inaccessible according to the ledger

I'll continue to use my Nano S because at least I can generate a seed offline and it's ok to me for now, but my next hardwallet won't be a Ledger for sure

[hugeblack]

A lot of data related to Ledger emails has been leaked so these scammers may know information about you such as your name, residential address and other details, do not believe any email that may contain your personal data. And with the use of the Recovery service, doing KYC for random services may make it easier for them to steal your money, so it is better to use a good hardware wallet.

[Z-tight]

I hope there was no victim of this phishing email, it is obvious that it is a scam and such emails should be ignored completely. Good of you to share it here for people who are not familiar with things like this, however, if you are using a hardware wallet, you should know the reason why you are using one and scams like this become even more obvious.

[Jating]

Not new, but there could still be some crypto enthusiast that might fall for it. This criminals knows how to time the market and when to send this emails, just like right now when we are in a bullish trend, they will have to take advantage of it as usual. And probably this scammers are also buying email list from amongst themselves. Or maybe some entities are selling this emails to a 3rd party in turn giving it to this cyber groups that's why everyone is getting this kind of emails. So again, we should educate ourselves ourselves so that we won't fall for this trick.

[Z-tight]

Not new, but there could still be some crypto enthusiast that might fall for it.

I really do hope not, this scam attempt should be easy to stop, but i know that people have fallen for easier scams before, so the chances are high that there was victims of this.

And probably this scammers are also buying email list from amongst themselves. Or maybe some entities are selling this emails to a 3rd party in turn giving it to this cyber groups that's why everyone is getting this kind of emails. So again, we should educate ourselves ourselves so that we won't fall for this trick.

Ever since the infamous ledger data leak, their customers receive phishing emails like this every now and then, and i am sure this would not be the last.

[TryNinja]

I keep getting this one:



They never stop comming, but they look different all the time. From leaks, to malware warnings, to important updates and actions required, etc...

[joniboini]

^
Looks very similar to the one I got. Makes me regret using my e-mail to subscribe to Ledger's mailing list in the past. That being said not sure I'm going to be safe even if I don't do that considering how many companies got their database leaked in the last few years. I moved to throwaway e-mails because of this.

[Z-tight]

Looks very similar to the one I got. Makes me regret using my e-mail to subscribe to Ledger's mailing list in the past. That being said not sure I'm going to be safe even if I don't do that considering how many companies got their database leaked in the last few years. I moved to throwaway e-mails because of this.

It is crazy that ledger customers have been continually attacked through these phishing mails all these years. The more knowledgeable users do not even have anything to worry about, because they can spot this spam anytime and ignore the email, it is the users who are not so knowledgeable that can fall for this and lose their money.

[dkbit98]

Scammers have a big database of all ledger users from several hacks and exploits, so I would not trust anything coming with email or on phone number.
Even better I would stop using all ledger devices and switch to other open source alternatives that are available.
That being said, similar things are happening with Trezor phishing emails, or anything else related with bitcoin.

[rdluffy]

Scammers have a big database of all ledger users from several hacks and exploits, so I would not trust anything coming with email or on phone number.
Even better I would stop using all ledger devices and switch to other open source alternatives that are available.
That being said, similar things are happening with Trezor phishing emails, or anything else related with bitcoin.

I have a Ledger Nano S, but I've never registered with Ledger
My hardwallet was bought at BestBuy and not on the official website, at least they not leaked my data 

Today I received a scam e-mail from “FTX”, and it is also common to receive from Celsius and others
As the value of BTC increases, so do the scam attempts
It's always important to reinforce and never let your guard down