Trezor and Ledger users are facing physical letter scams that lure them into scanning QR codes to steal their recovery phrases

According to Bleepingcomputer, Trezor and Ledger users have fallen victim to physical letter scams, where fraudsters impersonate official organizations to lure users into scanning QR codes that lead to phishing websites, and deceive them into providing their recovery phrases under the pretext of "identity verification checks" and "transaction checks," thereby facilitating the theft of cryptocurrency assets.