Ledger users encounter physical letter scams, with forged notifications requesting registration for a Bitcoin wallet through ZenLedger

According to Bitcoin News monitoring, a German Ledger user @jayr_crypto reported receiving a forged letter again this week. The letter impersonates Ledger, claiming that new regulations require users to register their Bitcoin wallets through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements and mentions German financial regulators, while also including a QR code that directs users to a so-called mandatory registration process.

The user believes that addresses exposed in a previous data breach are being used for targeted attacks on Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend the sale of its hardware wallets in a European retail network covering 11 countries and over 1,000 stores.

Earlier reports indicated that malicious spy implants were found inside Ledger devices purchased from European retailers. Ledger confirmed separately that compromised devices sold by a Southeast Asian distributor contained implants capable of stealing recovery phrases and transmitting them over cellular networks. Ledger has not confirmed any breaches of devices in Europe. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks initiated using home addresses. Do not scan suspicious QR codes or enter recovery phrases.