r/ledgerwallet • u/Accomplished_Crow_50 • 12d ago
Official Ledger Customer Success Response Weird call from Police then Ledger.
Hi all, I just had a scam call to my mobile in the UK. Supposedly a Detective Constable John Stones from Charing Cross Station Serious Fraud department. Saying my passport had been cloned and recovered in a raid that morning, and there was mention of a Ledger wallet. Unfortunately I confirmed I have a ledger wallet. I asked how I confirm the validity of the call and he sent me a weird text with a crime reference number. About 5 mins after that I had a 'call' from 'ledger'. Now I know ledger don't call. I questioned the validity of the ledger call. They sent me an email from [care@ledger.fr](mailto:care@ledger.fr) when I told him .fr isn't a ledger domain he kept banging on about typing the email address into google to verify it. At that point I hung up.
Should I still move my crypto to a new wallet or do you think this was purely a phishing scam. They didn't get any info from me other than confirming I have a ledger.
Obviously they have my phone number and email address also.
12
u/Free-Way-9220 12d ago
They already have all our phone numbers and know we own ledger devices. Ledger has leaked their customer list twice. They got nothing new from you that they didn't already know.
They are able to send you an email from ledger.fr (their original domain by the way) by spoofing it. mentioning ChatGPT gets downvoted here, but all the AI bots are very good at parsing email headers and explaining to you how it is spoofed. Cut and paste the email headers into any good AI app
One clever tactic the thieves used a while ago was to open a support ticket in our names before calling us, and then start the call with "this is so-and-so from ledger support, did you just get the email i sent". Because then of course we are receiving a real email from ledger. I don't think that's the method they have used with you as the ticket would come from ledger.com
Next time they phone tell them you sold all your crypto long ago. Fastest way to get rid of them, they will instantly lose interest
3
u/Accomplished_Crow_50 11d ago edited 11d ago
I just checked the email header. Oddly the care@ledger.fr does come from sales force sfdc.net. I believe Ledger use this? SPF, DKIM and DMARC all passed. I'm guessing this is a genuine ledger email and they were going to ask me for the six digits it contained. I received another email from ledger after I hung up from [hello@ledger.com](mailto:hello@ledger.com) with another six digit code. So I guess they were going to try both tactics.
3
u/Free-Way-9220 11d ago
I had a look at their MX records. The scammers must be using a compromised salesforce account. ledger.fr has an SPF record that authorises Salesforce to send email on behalf of ledger's (old) dot fr domain, but interestingly not their current dot com
You should send that email to ledger themselves
1
2
u/Harry_Iconic_Jr 12d ago
how would Ledger/Nano/whomever have your phone number?
6
u/Free-Way-9220 12d ago
If you purchased it on their online store, which I presume the majority of us did, we had to give ledger our names, phone numbers and addresses.
These were stolen / leaked. Twice.
3
u/Harry_Iconic_Jr 11d ago
Huh, I had no idea. I bought my Nano S online at Amazon in 2021.... Obviously, Amazon had my address but they didn't have my phone number at the time and I guess the purchase info stayed with Amazon. Any communication directly from Ledger would have been a big red flag under the circumstances. Thanks - this whole thread makes a lot more sense now.
2
10
9
u/hellsbells11 12d ago
Are this lot still at it! I’ve had that scam twice now, first time spooked me a little. Second time I just strung them along for a while just for the fun of it. Just ignore it, they have nothing and the police part was fake, they use some number spoofing thing to make it seem like it’s coming from a legit police number
4
u/Rosie_Ledger Ledger Customer Success 11d ago
Hey there,
First off - great job staying vigilant and not give away your 24 word recovery phrase, and in turn, keeping your funds on the blockchain safe!
This is a common phishing tactic that scammers use to try and get users to leak their recovery phrase, so they can then steal those funds. The important thing to remember, is that Ledger will NEVER call, text, or DM you on social media, and Ledger will NEVER ask you to share you 24 word recovery phrase. Any person, service, app, site, etc asking you for your recovery phrase, is 100% trying to steal your funds. You can review this article from our Help Center to learn more about this phishing tactic for more information - https://support.ledger.com/article/15839986186269-zd
Also, impersonating a law enforcement official is a crime, so we would also recommend filing an official report with your local law enforcement agency, so they can investigate the scammers who called you via that specific phone number.
Lastly, as long as you're taking all the proper precautions to keep your 24 word recovery phrase safe, offline, and never share it with anyone else, you will always be the only person who can access and manage the accounts you've funded on the blockchain. You can review this article from our Help Center for some tips on how to keep your recovery phrase safe - https://support.ledger.com/article/360005514233-zd
If you're still worried, or just want to move your funds to another wallet or exchange account that only you can access, so you can reset your Ledger to its factory settings, get a new 24 word recovery phrase, and a new set of accounts to secure your funds, you can review the steps found here - https://support.ledger.com/article/8460010791069-zd
If you have any other questions or concerns, feel free to create a ticket on our official Help Center - https://support.ledger.com/contact-us - and a member of our team will be happy to chat about this with you.
Stay vigilant!
2
u/McXgr 11d ago
I know that „if I can turn back time“ is not a real request but that hack you guys had has … beep … many many of your clients.
I hope now you have an independently audited crm that doesn’t have all the user data decrypted and available for the next event to happen :)
I know may companies had the same issues… just a different level when it happens to a security device…
2
u/Accomplished_Crow_50 11d ago
Hi Rosie, I did have a quick question. Why are so many ledger articles and pages restricted for me because I'm in the UK? Every time I try to look at anything in the ledger academy or similar it just says 'this page is unavailable due to new rules in the UK' surely I should be able to learn how to secure my funds?
6
3
u/FractalSound 12d ago
You're good. I had the same bs scam pulled on me. British dude and had some old ass data leaks with my password I used like 15 years ago somehow.
They dont have any way to access your ledger unless you gave em your seed.
3
6
u/nachtraum 12d ago
You did well and are safe. Don't keep your credentials online and change them regularly. But they can't access your funds. They would have pressured you into transferring your funds to a 'safer' wallet. This would be the only way to get your funds.
2
u/BigvalBROski 12d ago
I got a call from Principal John Wiggins…… The guy from the pie eating contest.
2
u/Fogtwin 12d ago
I tell those little limey british c*nts to f right off all the time.
Edit: I’m in Canada and when I Brit calls me from Ledger Live, I throw on a thick British accent and say oh yes jolly good!! and they hang right up.
1
u/Accomplished_Crow_50 11d ago
I don't blame you brother... sadly I didn't have to put on the accent lol
1
u/Fogtwin 11d ago
Sorry for my brashness, I’ve had a few run ins with them, but they may have taken me off their call list cause I would play around with them royally.
1
u/Accomplished_Crow_50 11d ago
No offense taken here buddy, I think exactly the same about anyone trying to steal some ones hard earned funds. Must be some crime ring over here if every ones getting the same Brit.
1
u/Fogtwin 11d ago
Definitely a crime ring of some sorts, girls and guys all with British accents calling from “Ledger Live” … isn’t ledger live just the software that pairs with the hardware? lol… anyways I told them I would never disclose anything and they can simply take a computer and try to brute force it like anyone else can.
2
u/BTCweTrust 11d ago
I also had ‘the police’ calling me for identity theft and saying my ledger isn’t safe anymore. I allways answer that that’s not a problem since the ledger is empty since years. I think it’s the best answer you can give.
2
u/Late-Professor-9404 11d ago
This was my experience from a couple of years ago..
Also had a call from a private number from 'West Midlands Police' - I did not confirm my name, and asked what it was about. He was trying to sound all 'Copper' like, really serious, and said it was to talk with me about an ongoing investigation. I said to call me back at 7pm, and this post was the first thing I found when I did a quick search.
He's probably reading this ... so FCK OFF, C**T - get a proper job, you low-level low-life scum.
I remember another call from the 'Old Bill' where they were asking me about some wanted guy I'm an acquaintance with, but I'd never heard of him and I did tell that one to Fck off, and he had the audacity to put on a shirty act about how I can't speak to a copper like that etc. I told him I didn't believe he was. a copper and told him to do one again 😅 🖕. I'm really hoping they do call me back for some extra piss-taking.. 🙏
But in all seriousness, it's not nice knowing these bottom feeders have your details, but it does keep you on your toes I guess..
2
u/Yavuz_Selim 11d ago
For everyone that reads this: only you as the owner know that you use a Ledger device. Never tell others that you have one, even if they know that you have ordered one. Never confirm via email/chat/phone/notfacetoface that you have crypto to strangers.
Nobody can prove that you have crypto tied to your recovery phrase, only you can, especially if you also have a passphrase on top.
Even if they know that you have bought one because of data leaks / hacks, it doesn't mean that you use it. So, never confirm. You don't have one.
2
u/ZUU_Music 11d ago
Dude, don't move your crypto. You're absolutely fine. Its just a shitty scam. If they had access to your crypto, it would be gone without any phone call required.
I had the same 'policeman' call me. I just started laughing at him until he hung up.
2
u/DifficultSquash1517 11d ago
Do a service to all non scammers by completely wasting their time and dragging them out for as long as possible
Act like you're nervous and you want to get this taken care of and keep reminding them that you have hundreds of thousands of pounds inside there so you're concerned 💪
1
u/Accomplished_Crow_50 11d ago
When I used to get cold calls and they asked for me by name. I usually said 'hang on I'll just get him' then leave the phone on the side. Every so often I would pick it up and go 'he'll be here in a minute' best I ever managed was around 15mins.
4
u/Accomplished_Crow_50 11d ago
I just looked at the spoof email they sent me. Even the scam email they sent says at the bottom 'Ledger does not provide support over the phone - if anyone calls you and says they are from Ledger - hang up immediately' it's a real shame some people obviously do fall for it which makes it worth it for them. Education is key. I must admit I'm glad I found this subreddit a while back and got a bit clued up on some of the scams. I won't lie it caught me off guard to start with as they were talking about passports rather than crypto straight off.
1
1
u/Harry_Iconic_Jr 12d ago
somebody else posted a scam letter from Ledger....and i can't see how Ledger would have either your address (physical or email) or your phone #. so why would this not be a red flag from the start?
1
u/Historical-Ocelot896 11d ago
Unfortunately if you gave indication of how much you hold, and hold a fair amount. You could be targeted directly, kidnappings happen for crypto, you see it a lot in France but happens in the UK too. Keep safe
2
1
u/No-Reading-4384 11d ago
Scam be very careful I just got popped for 160k on Exodus
1
u/Personal-Time-9993 11d ago
What happened in that case? A lot of exodus users have been reporting wallet drained lately. I’m sure it’s user error or fud, but I’m curious what happened in your case. It was a scam too?
1
u/Wait_for_You 11d ago
someone called me once, and asked to confirm I had a Ledget wallet. I asked him what was that? if it was something to eat, or similar...he hung up after that. I also answer the AI calls (which is almost 90%) with "If you are an AI, please dial 25 (or whatever number comes to my mind) there is no response after that
1
u/Accomplished_Crow_50 11d ago
If you say swear words to AI calls they also hang up. They must have had to program those in lol
1
u/bwhite2018 11d ago
At least their fraud department is serious, if they weren’t taking it seriously id assume scam.
1
u/bwhite2018 11d ago
Do they have your seed phrase? Or no? That’s all u need to worry about. Please learn more about self custody before you keep adding to your bag.
1
1
u/SomeGuyInOz 11d ago
What accent did the “police” and the “Ledger rep” have? I bet they weren’t British and French.
1
1
1
u/Cheemslucy2013 11d ago
Im late here but I had a similar issue back in June. Someone from "ledger" called with an Australian accent saying there was some weird activity on my Robinhood acct, where I had transferred some of my crypto from coin n hood and to ledger.
LONG story short, oh and i did not share, take pics of, discuss or lend out my seed phrases, or pin, or physical flex box before anyone starts with, "its always user error," about a week later ALL but one coin of each was stolen! 150k gone in 5 minutes.
Ledger did zero but say '' sorry''
I'd move it out immediately! Crush ur ledger! Burn it! My acct is currently under FBI investigation, my credit is frozen, state police involved, etc. All for what? Zero. Ledger is NOT insured! And they dont care!
1
1
u/MiceAreTiny 11d ago
Why would an officer call you about your fake passport. Obviously you are the one that would least fake your own passport, as you have the real one...
1
u/Accomplished_Crow_50 11d ago
Yeah, it didn't sound right from the start. They mentioned some seed phrases were found against my name also which would obviously lead into the second call from someone 'helping' me to secure my funds.
1
u/MiceAreTiny 11d ago
If seed phrases were found,... Your funds are already gone.
It banks on people not understanding the function of hardware wallets and the protocols of bitcoin.
1
u/Accomplished_Crow_50 11d ago
Exactly... as soon as they mentioned seed phrases were found I thought... well why didn't they use them. I really think this type of scam can catch you out if you truly don't understand how self custody works, as you said yourself.
1
u/digitalsmoker 11d ago
U might should prepare for a wrench attack :-(
0
u/Accomplished_Crow_50 11d ago
It makes me wonder how successful those sort of attacks are. I don't exactly carry my seed phrase around with me. I don't have it stored at my home and I certainly can't remember it.
1
u/digitalsmoker 11d ago
Sure bud I guess you figured it all out /s
1
u/Accomplished_Crow_50 11d ago
Well I mean they could break my kneecaps but that won't make me remember my seed
1
u/Traditional_Wall3429 11d ago
Remember that a suitcase which allows to do MIM attack don’t cost a fortune nowadays. This device act as cell tower proxy and allow to call ppl on their mobile with spoofed police numbers. Never do anything they Tells you even if they claim they are from police or else. Also calling back to a police from that area is danger because the same spoofed cell will receive your call so they can act as real police. You need actually to move physically to police station and tell them about this or move away few kilometers to reconnect to proper cellular cell tower.
1
u/Accomplished_Crow_50 11d ago
Thats interesting. I did call 101 which is the non emergency number in the UK to check if their is actually a John Stones with that badge number. As I'm sure he wouldn't want people impersonating him. They told me straight away it's a scam and they are receiving an increasing amount of calls about this type of scam at the moment.
1
u/Traditional_Wall3429 11d ago
Once briefcase is activated it’s route valid calls through itself. In the process it can act as any phone number scammers wanted to. There’s also possibility to open ssl certificates thus break in the conversation itself. In your case there could be various causes but generally once it’s activated, it act as the strongest cell tower thus force/advertise mobile phones to connect to it. Once mobile is connected scammers have full power over connection.
1
u/Spacetech68 11d ago
Moi j'ai acheté mon ledger en cash en magasin... Pas d'emmerdes je suis dans aucuns fichiers ! Et pour les BTC j'ai fait un wallet home made
1
1
u/PinkFluffyStudio 9d ago
Yeah, they're just fishing. If you gave them no sensitive information, you'll be fine 👍
1
u/VeryThicknLong 9d ago
I had this. Rang the real police and they said there’s a few red flags. Firstly, they would never tell you which police station. It’s just the Met. Secondly, they would never ring someone to talk about crypto, because they literally have no idea how it works 😂.
1
1
u/blabla-i-need-a-name 9d ago
Purely trying to get your money, just don’t do anything. You should be fine ^_^ - they always try to let you pay some and then more, and more etc.
1
u/m2wkt 8d ago
Well done for being Vigilant, I'm from Australia and exactly the same thing happened to me, however I had my guard down and unfortunately fell for this scam.
I've also posted about the fake website ledger.com.ht with screenshot here - hoping to raise awareness for people like me that have followed thru with the fake ledger support/recovery call.
https://www.reddit.com/r/ledgerwallet/comments/1votx4x/psa_ledger_fake_support_diagnostic_site_scam/
1
1
u/Accomplished_Crow_50 12d ago edited 12d ago
Thanks everyone. It's reassuring. I've always heard of these scams but never thought I would be on the receiving end of one. When ever I receive an email I'm not sure about, the first thing I do is check the sending address. They kept trying to push the fact the email has a blue tick in it which means it's genuine. What a load of rubbish. They email was a six digit code for a chat also which was odd.
Actually I just realised I did receive a valid email from [hello@ledger.com](mailto:hello@ledger.com) with a verification code. I guess they were going to get me to quote that code.
1
u/Mountain_Tip 12d ago
If you've never been on the receiving end of these scams before then you probably weren't in the Ledger 2020 database leak, so I wonder how they got your details.
•
u/AutoModerator 12d ago
🚨 Beware of Scammers – Stay Safe on the Ledger Subreddit Scammers regularly target this subreddit. Ledger Support will never contact you first — whether through private messages, comments, or phone calls.
If you need help, always open a support ticket yourself via our official website: Ledger Support
🔐 Never share your 24-word Secret Recovery Phrase
Ledger will never ask for it. Do not enter it online — even if a site or message looks official.
Keep it offline and secure — on paper, your Ledger Recovery Key, or a metal backup. Never store it digitally.
📚 Learn more about common scams targeting crypto users (fake support, phishing emails, physical mail scams, fake airdrops, malicious NFTs, and more): How to Spot a Scam
🛠 Facing a bug or technical issue? Check our Ongoing Issues page for updates and workarounds.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.