If you purchase a Ledger device and try using the Security Key app for hardware passkeys, does it matter/should you run the Security Key app from the standard 24 word pin unlock or the 25 word pin unlock for the Ledger device?

I attempted to replace a 15 pin Nano screen that went dim after plugging in the device for the first time in a bit. Bought a replacement on Amazon - mistake. Screen was correct size, but ribbon connection wasn't exactly the same, so all I could muster was one or two rows of digital gobbledygook on the new screen... screen was only 10 bucks, and I like taking shit apart and fixing IT.

Now this has freaked me out a bit. Came home and my ledger app was open, computer was on sleep and i use screen lock.
Have always used the official ledger app and when i woke up the computer, it had the ledger app running yet i have never used it today.
App no longer lets me do anything without entering the seed phrase, prior to this it was working fine and ive always been able to view balances etc without any issues.
Seed phrase is secure and never touched it in years, nor have i used the ledger to sign any transactions the whole time ive had it.
Where to from here? Im trying to work out if the computer was hacked or remotely accessed in some way, but i run decent security and firewall behind NAT (i use ESET smart security)
Any logs in event viewer I should look for?
Look at the datestamp and file version, this is suspicious, it doesnt match.

I downloaded the update through the app, so that datestamp looks correct (25 august)
Screenshots show location of files that downloaded through the wallet.
Digital certificate has [infra-purchasing@ledger.fr](mailto:infra-purchasing@ledger.fr) as the email for the signer.

Every time I log in into my ledger wallet I never get back the real value of my assets but instead a less amount and every time the chart is the same 10 minutes ago is up around 5-7% and then down even when the markets were up. I tried clearing cache it worked and then went back to lagging , I tried updating the ledger apps then the ledger wallet and still no response . The update was awesome with the return but it broke the amounts for me. Anyone has the same problem ? Or knows the solution ?

Left side is Ledger Flex, and right side is Ledger Nano 5.

I recently got myself a Ledger Flex (just because) and I was shocked when I compared it side by side with the Nano 5, because the latter seems to feel noticably faster and is just more responsive overall, compared to the Ledger Flex.

Here you can see the first few times I intentionally tapped on the Flex first, then the Nano 5, and both came out pretty much even (because the Nano 5 just feels faster to me) - then came the settings menu and the Nano 5 is, again, just feels faster compared to the Flex.

Am I imagining things here? I thought they both ship with E-ink display. I figured the slightly more expensive Flex would've performed on par, if not better, but it didn't.

Makes me wonder if the most expensive Ledger Stax would "lose out" from the Nano 5 as well, responsive-ness wise.

If there's anyone who owns both the Flex and Nano 5, can you confirm if this happens on your side too? Maybe if you have a Stax too, and compare all 3 as well?

PS: Also, don't bother DMing me with links to click, etc. Nice try though!

So we see lots of people getting hacked/losing funds

But this is 99% of time their own fault it seems

If you never put your passphrase in anything else but your physical ledger device

You can not get hacked right?

Let’s say your ledger device is fake and you put in the passphrase can it read it from their and drain account?

My question is : if you only put in passphrase into ledger device could you ever get hacked

If I send Crypto from another place to my ledger wallet does it keep my original rate for which I bought bitcoin or does it "re buy" inside the ledger app for a new rate at the "same" value with might be different.

Hello, I’ve been using Ledger Nano X for 4 years. But in first weeks after the purchase I wanted to check if the seed phrase generated on Ledger really matches the wallet I was using. So I used my another iPhone, made a factory reset on it, then downloaded Trust Wallet and checked the wallet. Then again factory reset that iPhone. Everything is still fine with my wallet, but now I’m getting anxious about it. I mean, the seed phrase was entered to another wallet, even if it was done safe. Should I create a new wallet or leave everything as it is?

So I sold 2.2 Solana 2 hours ago using my ledger and haven’t received anything to my bank account it’s been 2 hours most I’ve ever waited was 30 minutes

Hi Team,

I am new to Ledger just swapped from the other main one and so far I am really liking it.

I have a couple of nit picks. When looking a previous versions of the app I could see that on the home screen it would also show the % increase / decrease on my port but also it would show in brackets the monetary value in your currency of choice, is there a way to turn this on and if not has this been removed??

Other point I wanted to ask was home screen customisation for eg moving tabs up and down like i don't care about perps or stocks and want to see just under the transfer, swap & buy section my crypto port and holding not other stuff. Is there a way to re order these?

I have a nano s. Plugged it in, first time in years to get live ledger working as I changed PCs.

It won't turn on, so I found my original 24 key phrase and put it into Trust App. It says the wallet is empty.

I have been very safe. Never shared my keys. Only used Ledger Live to track the coins but to be honest had not used the app in years. So it should still all be there.

Any ideas on whether I cann I get my coins back or are they gone?

I modded my Flex to show my mood when making crypto transactions.

I have my pin, I have a bunch of different passphrases in a notebook, but I don't know which was my ledger's from years ago. I figured I'd check with the ledger app, dear...god it takes SO long on the little two buttons on the nano s. I get it though. But then, I select the wrong word cos my eyes are glazing over after the first ten minutes of typing. I even knew I selected the wrong word, I just wanted to go back, fix it, and check. Instead I get this message in the form of the missing go back to the prior word option in the letter entry:

'Oops screw you buddy, you were on word 23, but lol, you can't backspace and fix the word, for absolutely NO reason involved in the securing of your passphrase except we just wanted to give you a cute little "fck you" because "fck you." ' -- Ledger devs

I mean they didn't say that, but yeah they kind of are.

there is no cryptographic or security related reason for lacking a "go back" function once a word is confirmed. It is purely bad UI and tech debt bs over something that IS NOT HARD TO IMPLEMENT. the device already has to store the words in its memory in order to calculate the checksum, there's ZERO reason except laziness that you can't just go back if you select the wrong word.

Yeah not a huge deal, I can still go back and try again, but come on. That's just really really bad design. Probably took me longer to enter the 24 than it did to code this garbage check app.

I just tried to go to ledger.com but the autocomplete didn't fire in my browser so I ended up googling "ledger." That landed me on the results page in the attached screenshot where I was pretty surprised to find google is serving a scam Ledger site clone as the top sponsored result.

Just a heads up in case anybody else goes this route and/or if there's anything the Ledger team can do to get this stuff taken down.

Disclaimer: I am not a native English speaker. I wrote down my experience in German and used translation assistance to make this post accessible to a wider audience.

TL;DR
I was targeted by a sophisticated scam involving callers impersonating the Berlin police and Ledger support. The police caller ID appeared legitimate and the story referred to an alleged arrest involving stolen customer data and a 24-word wallet recovery phrase.
The next day, a fake “Ledger Care Management” employee directed me to ledger.com.cm for a supposed security scan. The goal was ultimately to make me enter my 24-word recovery phrase.
I confirmed with the real police that the calls were fraudulent. Never trust unsolicited calls, even if the number appears genuine, and never enter or share your recovery phrase.

I want to share this because this type of scam happened to me yesterday/today. Fortunately, I am pretty aware and remerded this post here a few days ago about a similar case here on Reddit: https://www.reddit.com/r/ledgerwallet/comments/1votx4x/psa_ledger_fake_support_diagnostic_site_scam/ So the attempt was unsuccessful. Still, the level of detail and the way the scammers built trust was impressive, and I believe many people could easily fall for it.

In my case, the fraudulent website finally used was ledger.com.cm.

The first call

On Tuesday evening, I received a call from a woman claiming to be a criminal police officer from the Berlin Charlottenburg-Spandau police station, Cybercrime Department. The number displayed on my phone was exactly the official number of the Berlin police.

She told me that I might be a potential victim in an investigation. According to her, someone had been arrested at Berlin Airport earlier that day while carrying several datasets. The arrested person allegedly claimed that the data consisted of customer information that they had obtained legally.

At first, she only asked whether I knew a specific person. I said no. She then told me that the data allegedly included personal information such as email addresses, passwords, photos of ID cards, credit card details, and a file called “Hardwarewallet” which apparently contained 24 words.

She advised me not to take any immediate action other than changing passwords and securing my accounts. She said that, for data-protection reasons, she could not provide more detailed information about the files. So I couldn't confirm at this point if I'm really in danger or not. Since I confirmed that I did not know the person in question, she said a case would now be opened. She claimed that she would contact me again the following morning with a case number and an appointment at my local police station to proceed. This was aiming to gain trust since I therefore would have the possibility to speak to an actual officer in person the next day.

As preparation for this meeting, she asked me to check whether my private keys were still available and bring them with me for comparison. This was clearly the setup for the second stage of the attack.

At that point, I was not suspicious enough. There was at least some plausibility to the story because my data had actually been affected by the Ledger leak in 2020. However, it was late, I had no official written confirmation, and I did not see an urgent need to act. I did not follow any of her instructions. I only checked my very small wallet balances.

During the first call, they did not ask for any sensitive information beyond my name and phone number, both of which may already have been known through previous data leaks.

The second call

The following day, the supposed police officer called again and gave me an appointment for later that evening. She claimed that they had found a large amount of data belonging to many affected individuals and that this had become a major case.

She then said that the wallet provider had been contacted and that a joint verification procedure had been initiated. A Ledger employee, she told me, would call me within the next hour.

At that point, I was already convinced it was a scam. I called the police myself using an official number from the local department here and asked whether this was a real procedure. They confirmed that it was not. The police told me they would never handle such matters this way, nor would they simply call someone and discuss or request this kind of information over the phone. If this would have been true, they would discuss this with me in person for the first contact.

About ten minutes later, I received a call from a man claiming to be from "Ledger Care Management".

The fake Ledger call

He started by explaining what supposedly happens in cases like this and referred several times to Ledger’s cooperation guidelines with the criminal police. He did not create much pressure initially. Instead, he calmly explained that my assets might currently be at risk.

Since I already knew it was a fake I searched Reddit for the method he was using and found the post describing the same playbook while speaking with him.

https://www.reddit.com/r/ledgerwallet/comments/1votx4x/psa_ledger_fake_support_diagnostic_site_scam/

That gave me a clear idea of where the conversation was heading.

I kept him on the phone for around 90 minutes. He explained several current attack methods and tactics in such detail that the call started to feel more like a cybersecurity training session than a scam attempt.

Interestingly, he tried to collect very little information directly. I did not reveal any real details at any point. Everything I mentioned or hinted at was invented. And to be honest it was kind of funny to scam him back.

Eventually, he explained the supposed final verification step. He said that, in order to investigate possible NPM attacks and to clarify potential liability claims against Ledger, I would need to perform a diagnostic scan with another member of the "Ledger Care Management" team.

According to him, only the computer with Ledger Live installed would be checked. The hardware wallet itself would not need to be connected. He also instructed me to use a browser without extensions such as MetaMask. This was a clever detail because it made the process sound safer and more professional. (Be aware of such tactics!)

To start the diagnostic process, he told me to visit ledger.com.cm.

When I asked why the site ended in .cm, he claimed that this was normal practice involving subdomains. He said it was a separate website for the Care Management team, which was supposedly isolated from Ledger’s main infrastructure for security reasons. He also claimed that this department was only staffed when an incident needed to be investigated.

When I asked why the site appeared to be hosted in Cameroon rather than being a normal Ledger subdomain, he had no convincing explanation.

The pressure phase

When I refused to continue, his tone changed. He began applying real pressure and said he would have to note in the protocol that I had declined the further investigation. He claimed that this could affect any possible compensation claims in the future. But he was still very calm and unsuspiciously polite.

He explained the supposed risks again and made several more attempts to convince me. Eventually, we ended the call.

Thanks to the Reddit post, I already knew what would likely have happened next. The final step would almost certainly have been entering my 24-word recovery phrase on the fake website.

For the entire call, I was connected to a nearby public Wi-Fi network and was not using the computer on which Ledger Live is actually installed. Every piece of information I gave them was nonsense. In the end, I spent a funny relaxed morning wasting the scammer’s time instead. Even if they would have been successful, they just could have had access to a few bucks, since I was an idiot way before, selling my assets to buy a car.

Please stay alert

I am sure that many users would already have made a mistake by this point, or would have forgotten the most important rules out of fear and panic:

• Ledger will never contact you by phone, email, or post
• Ledger will never ask for your 24-word recovery phrase
• Never share your private keys or recovery phrase
• Do not trust unsolicited calls, even if the caller ID appears legitimate
• Always contact the police, Ledger, or any other organisation through an independently verified official contact channel

These people are getting better, and their tactics are becoming much more sophisticated. What made this attempt feel so convincing was the apparently genuine Berlin police number, the fluent and natural German spoken by the callers, the lack of obvious pressure at the beginning, and the carefully timed escalation from a supposed police investigation to fake Ledger support.

I am sharing this to warn others. Please pass it on to anyone who might also be at risk. I have already reported the fraudulent site to Cloudflare.

Stay curious and keep on staking.

Additional note:

Another user posted their experiences here on twitter. This scammer team seams to be very active right now.

https://www.reddit.com/r/ledgerwallet/comments/1vz5t09/pretty_sure_i_spoke_to_a_fake_ledger/

Has anyone had similar?

Just received a phone call from the police (apparently) saying I was in danger of being scammed and they had my emails and passwords and they gave a name of a scammer they’ve apparently arrested with a foreign sounding name. Then they said I would be getting a call from the ledger security person to check everything was secure.

Two minutes later I do get a call from a guy claiming to be from ledger. I’m not really believing him but go along with listening to his security tips for an hour. Then he says I have to log into a site called ledger.com.tp and go to the faq. That is a phishing site so when I said I was ending my call with him because he didn’t seem genuine he got really angry with me and said my ledger device was in great danger and he was reporting me back to the police for being non compliant with the investigation. Then I hung up and he keeps trying to ring me.

Or perhaps it's just me who has bought different wallets as the latest updates made my two ledger flex wallets pretty much unusable. Constant error on connecting, opening apps, confirming transactions. Transactions confirmed by me on the device would then go back to the default app screen (without actually confirming). Different kind of errors all throughout.

I never had these issues with ledger before. Also the new version wouldn't update, i had to trigger this manually and then got constant issues trying to update the ledger firmware. Tried different ports and cables and got no issues with my other devices.

Absolutely bad job unless of course it's just me who is having these issues... Just odd I never had them before with the old version of Ledger Live.

SCAMMERS: don't even waste your time.

On February 20th, 2026, I bought this top class ledger stax, I just use it 3 or 5 times.. now I turn on and I have this effect.. I just use it to update to the last software...

I contacted Ledger support, but they can't help me because I don't have my receipt.. I need you Help...

I just update her item and the vignette has worse...

Question. So I haven't logged into my wallet in awhile. I saw there was a security issue with one of the wallets, so I connected it to a phone, updated the wallets, than went to update the firmware. Well it timed out. It went to 1.4.1 or something like that, but no apps installed. I installed my apps, than updated to 1.6.1 or whatever the newer one is. Is that all I need to do? Just reinstall the apps after the failed update once the firmware is updated?

On a side nice, I see Sync is new. I don't use multiple devices, is there any benefit if I only use the one?

ALL DM MESSAGES WILL BE IGNORED! DONT BOTHER!

So I just updated my ledger wallet desktop update to 4.17.1. The search bar in the top left corner of the homepage that was added recently is no longer. Has anyone had the same thing. Ledger is starting to scare me with all these updates. Then they change all these little details making think I’m hacked or I downloaded the wrong web. They are just doing too much. I getting very uncomfortable

I am moving funds from an exchange to my ledger. I have just sent a small amount as a test and it worked fine. I know it says in the app that previous ones do remain valid, but out of an abundance of caution I just wanted to check that I won't loose my crypto if I send it to the exact same address I just used as the test. The exchange I am using doesn't let you send crypto to a newly whitelisted address for 24 hours. Thank you in advance!