Phishing Letters Impersonating Trezor and Ledger Again Target Hardware‑wallet Users

Editorial desk scene with a phishing letter impersonating Ledger and Trezor branding, a QR code, and seed phrase hint.

Printed phishing letters that mimicked official communications from hardware-wallet makers were mailed to Trezor and Ledger users, urging recipients to scan QR codes or visit fake websites and enter recovery seed phrases. The campaign deliberately used authoritative branding, counterfeit signatures, and hard deadlines, including February 15, 2026, to trigger rushed compliance and irreversible asset loss.