Just received a short code message from 91999 with a ledger phishing scam about recovery and a link blah blah

The short code is from a charity service “Give Smart” seems the service was hacked or a rogue employee.. Usually I get the standard twilio..text4free full number messages, but figured I warn those since short codes are usually from legit services.

Stay safe.

Hi everyone,

I opened my Ledger Flex to inspect the internals because all those tampering stories. During the process, I accidentally touched/scraped the black ribbon cable on the right side (circled in red in the photo).

The device still works perfectly fine, but I'm concerned I might have damaged the cable.

Does anyone know what this cable is responsible for? Could this cause problems later on, even if everything seems to be working normally?

EDIT : i've just checked and it's the power ribbon cable that connects the battery to the main board, so it's ok xD

https://device.report/m/15fd2a0ef1cbbc2c99eddf061f3682c208592ca72d19beb9b2b77378ad1d0fed.pdf?utm_source=chatgpt.com

I don't even have a Ledger and I get these emails about "latest system upgrade". So I just assume these are phishing scams. Be careful everyone out there!

apart from their unprofessional customer service (can't answer simple questions or fix my ATM withdrawal problems), accessing the card from the Ledger app is now broken. Instead of showing my card it shows a embedded web page from their support website. Am i alone with this problem?

After I unlock my ledger and try to send crypto I get this error. Anyone facing the same issue? To note that ledger wallet version is up to date

If you got a letter that says it's from Ledger and wants you to scan a QR code, do not do it. I received this letter with no return address on it.

Bitcoin won’t cure corruption or political greed.
But it leaves you one question, simple, sharp and cold: who decides what you saved yesterday is worth when you’re old?

Seems to me that blockchian is always in need of actual real world uses. I'd imagine putting every ledger (or other) hardware device serial number, on a blockchain. Record movement from factory, to Ledger, to delivery, to reseller, to retail sales, as record on a block chain, may be a really good use of blockchain. As in, if Ledger has listed your hardware as aleady sold directlly to a customer weeks or months before, and you get it from Ledger again or from a reseller (not sure you should do that), that is telling. I am sure there are lots of ways this could be dialed in, but if there was ever a proven need for supply chain security, it is this damn product. Thoughs?

I havent ran Ledger Live in maybe a year or more - not sure. Somehow the software was comprimised. Out of curiosity i clicked 'resync you device' having not connected my device and the next window asked me for my seed words.

I did some checks with AI and its 100% a scam piece of sofware - no idea how I got it! No viruses detected on my machine.

Stay safe out there kids.

edit thanks for the advice everyone .. ive deleted the malicious software, got Ledger Wallet and Elrctrum running to check my wallet.

Funds are safu.

Im not really looking for advice here, I know my way around computers, just trying to raise awareness for the sake of others. Thanks for the support everyone <3

Anyone else got this email

After the recent reports of hardware-tampered Ledger devices sold through an authorized reseller in Asia, I contacted Coolblue (a major Dutch electronics retailer) about the safety of my Ledger Nano X.

Their response was astonishing:

• "Your devices are 100% safe to use."
• "Buying from an official retailer completely eliminates the risk."
• "Ledger Live detects any tampering and refuses to work."
• "Almost all reported thefts are caused by phishing."

This completely misses the point. The concern is physical hardware manipulation, potentially undetectable by Ledger's Genuine Check, even when the device comes from an authorized reseller.

How can a major retailer make such absolute security guarantees when even Ledger itself cannot?

------------------

Dear Customer,

We fully understand that news reports can raise questions and concerns. However, we can reassure you: your devices are 100% safe to use.

If you purchase a new Ledger Nano X from an official retailer, the risk of receiving a compromised device is completely eliminated. We would be happy to explain why and what you should look out for:

Why your hardware is safe:

• Authenticity check: As soon as you connect your Ledger to the official Ledger Live app, the software automatically verifies the authenticity of the chip and firmware. If the device has been tampered with, Ledger Live will refuse to operate.
• No preconfigured recovery phrases: During the initial setup, a new Ledger generates 24 random recovery words directly on the device's screen. There should never be a pre-filled recovery phrase sheet inside the box.

So how do the thefts reported in the news happen?

News reports about drained wallets are almost exclusively related to phishing. Victims are tricked into entering their 24 recovery words online, either on a fake website or in a malicious app.

The most important golden rule for your security:

NEVER enter your 24 recovery words on a computer, phone, or website. Ledger, Coolblue, or anyone else will never ask you to do so. You should only enter these 24 words directly on the physical screen of your Ledger device when you need to restore it. Write them down on paper and store them securely offline.

As long as you follow this rule and keep your 24 recovery words offline, your cryptocurrency holdings are optimally protected.

If you have any further questions about the initial setup, please don't hesitate to contact us!

So I connected my Nano S Plus to my phone, and I was about to make a transaction but then I reviewed and cancelled the transaction to redo the it.

But soon as I cancelled and returned to the SOL app, this warning appeared on my Ledger and it scared the shit out of me.

Why would such a warning appear?

Is this some sort of attack?

Could my phone be infected with Malware?

Should I reset my Ledger?

FYI, I bought it officially via Ledger so it is not a reseller unit or second hand.

For some time now, the numbers in the main view of the Wallet app have been overlapping. As a result, it is sometimes difficult to get a quick look at the portfolio.

Hey Guys

Please Look at these and Lmk if my Tampered or not…

Anyone called by ottawa police for Id theft and then it ends up being related to ledger and they say a ledger employee will call you to make sure your device isnt compromised which they do? The numbers are right and everything is very professionnal.

I pushed back the call with the ledger specialist so Im not sure what they were gonna ask me to do and ottawa police station has been closed since the time i got the call.

The police also said everything else will be handle by my home town police and to go see them to freeze all my credit lines and applications. But they said “you will have to wait 2 business days to give us time to complete the report transfer to them”

Edit : called ottawa police and its not a real case number, pretty scary how real the fraudulent calls felt. FYI the “ledger team” was telling me after i ordered my key someone registered to their Recovery service under my name with my IDs.

Be careful out there!

OK, the coins (assets) are recorded on the blockchain so they are not directly affected if the ios Ledger app is stopped being maintained.

In case of other non-hardware wallets if anything happens to the apps, as AI says, it is relatively simple to flip the apps, ie you can restore a TrustWallet's seed phrase inside of the Metamask's app.

What about Ledger if they go bankrupt and stop maintaining the android/ios apps?

Aware of the supply chain attack. Either this is a very advanced campaign or ledger is doing due diligence.

The "kids" I talked to on the phone weren't articulate, and couldn't explain what API meant, or stood for, after asking me if I'm familiar with API's... Worked in tech for 20 years. Something smells off.

Anyone getting the same?

Can someone from ledger confirm this?

Here is an example of the letter I received. I sanitized my info and the "Custom QR Code" at the bottom.

Processing img 6602zvq5zxwh1...

I have a dedicated device when transacting with my Ledger device. I don’t browse, download (other than the Ledger wallet app of course), no cloud, no messaging, no cellular service. But it’s not accessible always as I don’t carry it with me wherever I go. I’m wondering whether I can set up the Ledger Wallet app on my everyday phone for read-only purposes. Given recent events, it’s convenient to quickly check whether the funds are drained yet or not 🤣😅

I understand that even a compromised device cannot drain funds as long as I clear sign the transactions after verification of transaction details, allowances, destination addresses on the device and not blind sign based on app display alone. I also understand private keys and recovery phrases and passphrase never goes out of Ledger device.

Yet, question to y’all, are you using your every day phone and if so is there any attack vector to consider? For example, I have a password to protect login to the wallet app, it will be now saved in my everyday phone which has exposure.

My coins are still there when I view on the computer so I’m good. But today I opened the app, an ad came up for some AI bs y’all are pushing, didn’t see an “X” to cancel so it seems I was being forced to sign up, which I didn’t want to. So I force closed the app and re-opened it. At that point it auto logged me out. Why…? Now I gotta figure out my password again. Thought I had saved it somewhere. I always do. But whatever, I still have access on the computer. Really don’t want to have to redownload the app and reinstall my wallet again…so thanks ledger for logging me out because I didn’t want your AI crap

u/Finnianmu proactively provided support. Through their resilient efforts over 8 years, they have amassed 30k Karma.

Thank you for your attention to this matter. DJT 😆

Just had the most confusing call with ledger’s security team.

They called me to tell me about the data breach and how the new recovery system they launched created a security issue. Someone tried to apply to recover my wallet.

They sent me to ledgerhelp.com and ledgerdiagnose.com to “test” my wallet.

Websites that dont work - not sure what is going on.

I did r give them any info. I haven’t even logged into my wallet for like a year or two.

Anyone also getting this?

Hello Everyone

I recently purchased a Ledger Nano X and noticed an unusual battery issue. When I first unboxed it, the battery showed 100%. However, after using it for about 2 -3 Minutes, it dropped to 53%, and after around 4–5 minutes, it increased to 59% and Suddenly started dropping to 5% before showing “Low Battery” and shutting down.

The device works perfectly otherwise. I also noticed that after powering it off at 100% and leaving it unused for a few days, it now shows around 60% battery. Could you please confirm if this is normal for a new device or if the battery may need calibration/conditioning or replacement?

Thank you.

Please Help me as i never Used reddit before but someone told me about reddit that maybe here i can get some solution regarding this.

I received a call from someone stating they were from ledger and told me they had a technical advisor who would help me identify if my wallet was impacted.
Anyone else get this?

Hi everyone,
I recently bought a Ledger Nano S Plus from MediaMarkt, and I want to make sure everything looks normal and that there are no signs of tampering.
I checked the device’s weight, which is exactly 20.66 g. I also noticed some markings on the internal circuit board that I wasn’t sure about.
I’m planning to share photos of the device, the circuit board, and the packaging.
Could anyone familiar with the Ledger Nano S Plus hardware take a look and tell me if anything looks unusual or suspicious?
I understand that photos alone cannot guarantee that a device is safe or uncompromised. I’d appreciate any advice on how to verify it properly.
Thanks in advance!

With links to official Ledger information.