Feds Recover $600K From Ledger Phishers Who Said "Forget Emails, Let's Try Snail Mail"

The U.S. Attorney's Office for the District of Connecticut has recovered and forfeited over $600,000 in cryptocurrency from a fraud scheme targeting a Ledger hardware wallet user. The scheme, which played out in September 2025, involved a surprisingly analog approach: a physical letter. Apparently, scammers decided that 2025 was the year to revive something called "the postal service."

The Connecticut resident received mail purporting to be from "Ledger Security & Compliance," instructing them to perform a mandatory security check. Following the instructions compromised their hardware wallet, allowing fraudsters to make off with $234,000 in cryptocurrency. The victim did exactly what the letter said, which in hindsight turned out to be the financial equivalent of handing your house keys to the nice gentleman who "just needs to check the plumbing."

The FBI and Connecticut State Police traced the flow of funds, enabling authorities to seize approximately $600,000 in USDT. The stablecoin was subject to a civil forfeiture complaint alleging it was proceeds of wire fraud and money laundering. The scammers got to enjoy their $234K for approximately zero seconds before the feds came knocking.

This marks the latest in a series of phishing incidents targeting crypto hardware wallet users, with fraudsters increasingly leveraging physical mail. Similar campaigns have sent fake letters to Trezor and Ledger owners featuring company logos, holograms, forged executive signatures, and QR codes directing victims to phishing sites. Someone really said, "You know what will make this phishing scam feel legitimate? Making it look like a phishing scam from 1987