Phishing scammers forge Ledger emails to trick users into revealing seed phrases

Ledger users report that phishing scammers are spoofing the crypto hardware wallet provider’s support emails to trick users into revealing their wallet keys. According to screenshots shared on X and a Dec. 17 report by BleepingComputer, the fake email claims that Ledger suffered a “recent data breach” and encourages recipients to verify their private seed phrase under the guise of needing to “protect” their assets. The email appears to come from a legitimate support email from Ledger, but is actually sent via an email marketing platform. The email directs visitors to a website that professionally presents a Ledger-branded website to appear legitimate and prompts visitors to “Verify your Ledger,” falsely claiming to check if the device has been compromised. The prompt opens a pop-up window requesting a seed phrase, which, if shared, gives the scammers full control over the wallet and allows it to drain funds.