Crypto hackers are sending physical letters impersonating Trezor and Ledger to steal cryptocurrency wallet recovery phrases.
The phishing campaign claims recipients must complete mandatory “Authentication Check” or “Transaction Check” procedures.
The hackers are also creating urgency through deadlines of February 15, 2026 for Trezor. Letters printed on official-looking letterhead direct users to scan QR codes leading to malicious websites.
The phishing sites request 24-, 20-, or 12-word recovery phrases under the pretense of verifying device ownership.
Once entered, recovery phrases transmit to threat actors through backend API endpoints, granting attackers full control over victims’ wallets and funds.
Both hardware wallet companies suffered data breaches in recent years that exposed customer contact information.
Read more: crypto.news
Source: CRYPTO WORLD NETWORK NEWS
