Hacking News
Fake Police Calls and Ledger Emails Used to Steal Crypto Wallet Recovery Phrases
Crypto holders are being targeted by scammers posing as police officers and Ledger support staff. The callers claim victims' personal or wallet information surfaced during a criminal investigation and that their crypto accounts may be at risk. They use real automated emails from Ledger's support system to create a sense of urgency, tricking victims into revealing their 24-word recovery phrases or entering them on fake websites. Multiple Reddit users have reported similar calls, with some victims receiving a second call from an individual pretending to be from Ledger. The scammers exploit Ledger's genuine support ticketing system to make their calls appear legitimate, directing victims to lookalike diagnostic or recovery pages where the phrase may be asked for to validate ownership.