Crypto hackers are sending physical letters impersonating Trezor and Ledger to steal cryptocurrency wallet recovery phrases.
Summary
- Hackers mail fake Trezor and Ledger letters with phishing QR codes.
- Sites request recovery phrases and grant attackers full wallet control.
- Hardware wallet firms never ask users to share seed phrases.
The phishing campaign claims recipients must complete mandatory “Authentication Check” or “Transaction Check” procedures.
The hackers are also creating urgency through deadlines of February 15, 2026 for Trezor. Letters printed on official-looking letterhead direct users to scan QR codes leading to malicious websites.
The…
