Ledger Users Alarmed After Receiving Physical Scam Letters at Home Addresses

Crypto wallet maker Ledger is facing renewed backlash after multiple users claimed they received highly convincing scam letters delivered directly to their homes, raising fresh fears about customer data exposure and personal safety.

The controversy began after X user @Punk4725 shared a photo of a letter he said arrived at his home address in Italy. The document appeared to carry Ledger branding and instructed users to scan a QR code for a supposed “security update” tied to something called “Quantum Resistance.”

 

 

The attached image showed a professionally printed letter using Ledger logos, company formatting, and even a fake signature from Ledger CTO Charles Guillemet. The message warned users that failing to complete the update before a deadline could affect access to their wallets.

The scam immediately caught attention across crypto X because of how sophisticated it appeared. Unlike typical phishing attempts sent through email or direct messages, these letters were physically mailed to people’s homes.

Soon after the original post, other users began reporting similar experiences.

One user, @godcandle, replied saying:

 

Source: godcandle

Another user, @Bacco1977Dublin, claimed the issue may be connected to Ledger’s past customer data leak. He wrote:

 

Source: Bacco1977Dublin

That comment quickly reignited discussion around Ledger’s 2020 data breach, where hackers leaked personal information belonging to hundreds of thousands of customers, including names, phone numbers, and home addresses. At the time, many users warned that exposing the identities and locations of crypto holders could eventually lead to targeted scams, extortion attempts, or even physical threats.

Now, some users believe those fears are becoming reality.

One crypto user from the United States said he also received the same physical scam letter and warned that the situation goes beyond digital fraud.

“Kidnappings happen all the time to crypto holders,” he wrote in a widely shared quote repost.

“People who use Ledger products are customers who take their crypto serious. Now we are targets for kidnapping, extortion, blackmail.”

The user added that the scammers appeared highly organized, using custom envelopes, Ledger branding, and urgent language convincing enough that he initially kept the letter instead of immediately throwing it away.

He also criticized Ledger for what he described as a lack of public communication around the issue, saying he had not seen any warning emails, wallet notifications, or X posts addressing the scam campaign.

When Crypto Security Turns Physical

This incident has once again exposed one of crypto’s most uncomfortable realities. In an industry built around self-custody and financial sovereignty, privacy failures can quickly become personal safety concerns.

Unlike traditional banking customers, crypto holders often publicly discuss wallets, holdings, and security tools online. When physical addresses become linked to those identities, the risks change completely.

For years, many in the crypto community treated phishing emails as the main threat. But physical scam letters arriving at people’s homes push the fear factor to another level entirely.

The timing also made the situation more awkward for Ledger.

Just hours before the scam letters began trending on X, Ledger posted about keeping users secure by storing crypto offline through its hardware wallets.

 

Source: Ledger

Meanwhile, criticism against Ledger continued spreading across the platform, with some users openly recommending competing hardware wallet brands like Trezor, BitBox, and OneKey instead.

One user argued that open-source wallet providers offer greater transparency compared to Ledger’s approach, particularly after previous controversy surrounding Ledger Recover, the company’s optional seed recovery feature.

At the time of writing, Ledger has not publicly confirmed whether the scam campaign is tied to old leaked customer data or a newer breach.

Still, the reaction online shows that many users have already connected the dots themselves.

And for some crypto holders, the biggest concern is no longer losing funds to a phishing link. It is the idea that strangers may already know exactly where they live.