A new wave of phishing scams is targeting cryptocurrency users by spoofing emails from Ledger, a popular hardware wallet manufacturer. These fraudulent emails claim to be notifications of a data breach, urging recipients to verify their recovery phrases.
“We are writing to inform you of a recent security incident that may have impacted your Ledger account,” the fake emails typically state. “We are taking immediate steps to investigate and mitigate the impact of this incident.”
The emails then direct recipients to a malicious website that mimics the official Ledger website. This website prompts users to enter their 24-word recovery phrase, which is the crucial key to accessing their cryptocurrency funds, reports FXStreet.
“Never Enter Your Recovery Phrase Anywhere But On Your Ledger Device”. Ledger has warned users about these phishing attempts, emphasizing that they will never ask for recovery phrases via email or any other remote channel.
“Never enter your recovery phrase anywhere but on your Ledger device,” Ledger stated in a security advisory. “Be extremely vigilant and always double-check the sender’s email address and the URL of any website you are visiting.”
Ledger has warned users about a new wave of phishing emails impersonating the company and claiming a data breach. These fraudulent emails attempt to trick users into revealing their 24-word recovery phrases on a fake website.
🚨🚨🚨🚨
WARNING!These scamming bastards are sending emails to scare you into sharing your private information.
DO NOT CLICK ON ANY LINKS
DO NOT SHARE PRIVATE INFO (passwords, recovery/see phrases, etc)
Notice the senders email address:
[email protected]PLEASE SHARE!!!… pic.twitter.com/ZsVk14DY4E
— James Rule XRP 👊😎 (@RuleXRP) December 13, 2024
Ledger has issued a strong warning: “Ledger will never call, DM, or ask for your 24-word recovery phrase.” They emphasize that any such request is a scam.
While it’s unclear if any users have fallen victim to this specific scam, the incident follows a recent report of a user losing $2.5 million in Bitcoin and NFTs despite never sharing their seed phrase online, highlighting the persistent threat of cryptocurrency-related scams.
Protecting Yourself from Phishing Attacks
To protect themselves from such scams, cryptocurrency users are advised to:
- Verify the sender’s email address carefully.
- Never click on links or download attachments from suspicious emails.
- Type the official Ledger website address directly into the browser address bar.
- Enable two-factor authentication (2FA) for added security.
- Stay informed about the latest phishing scams and security threats.
By following these precautions, cryptocurrency users can significantly reduce their risk of falling victim to phishing attacks and safeguard their digital assets.
Leave a Reply