Ledger warns of fake recovery scams

TLDR

Ledger has issued an urgent alert that scammers are impersonating the company and trying to steal users recovery phrases through fake support and security update messages.

1. Ledger reports a surge in fake accounts, emails, and websites that look official and try to trick users into entering their 24-word recovery phrase.
2. These scams piggyback on broader phishing waves in crypto, using convincing branding, urgency, and even past data leaks to target known hardware-wallet owners.
3. Staying safe mostly comes down to strict rules: never share your recovery phrase, never follow links from unsolicited messages, and verify everything via official Ledger channels.

Deep Dive

1. Details Of Ledgers Warning

Ledger, a major hardware wallet maker, says scammers are increasingly posing as the company or its staff across social media, email, websites, calls, and fake usernames.

In one recent case, a user flagged a fake email claiming to be a post-quantum security patch from Ledger, which tried to push them to a malicious site. In response, Ledger reiterated that it will never call, DM, or email users asking for their 24-word recovery phrase and that any such request is a scam. The company urges users to verify messages via its official channels and to avoid clicking unknown links, emphasizing this in its urgent warning on fake accounts and recovery phrase scams.

Confidence: high, based on Ledgers public advisory and multiple independent scam reports.

2. Why These Scams Are So Effective

Attackers lean heavily on social engineering: urgent language, security-themed messages, and professional branding that closely mimics Ledgers visuals and tone.

Because Ledger suffered a customer data leak in the past, scammers likely hold real names and addresses of many hardware-wallet owners, enabling very targeted phishing, including emails and even physical letters and fake replacement devices. At the same time, phishing and social engineering attacks across crypto have already caused hundreds of millions of dollars in losses in 2026 alone, according to industry reporting on recent campaigns and on-chain security data.

3. Practical Rules To Protect Yourself

You do not need new tools to stay safe, but you do need strict habits. Key rules:

1. Never enter your 24-word recovery phrase into any website, app, or form. Ledger will never ask for it in email, chat, phone, or security portal.
2. Treat any unsolicited message about updates, airdrops, post-quantum patches, or account verification as suspicious. If in doubt, open Ledger Live or type the official Ledger site manually in your browser.
3. Check domains and accounts carefully (for example, email from an address ending in @ledger.com, and official, verified social profiles) and ignore QR codes or devices that arrive unrequested.

Conclusion

Ledgers warning highlights that the biggest threat to hardware wallets today is not device hacking but social engineering aimed at your recovery phrase.

By assuming every Ledger message is fake until proven otherwise and only trusting flows you initiate yourself through official apps and sites, you can sharply reduce your risk of falling victim to these scams.