Beware of Fake Ledger Wallets

A researcher has uncovered fake Ledger hardware wallets designed to steal both user data and cryptocurrency funds.

A new type of threat is emerging in the crypto world. This time, it involves counterfeit hardware wallets that look authentic at first glance but are actually engineered to compromise users and drain their assets.

The issue came to light after one such device was purchased from a popular Chinese e-commerce platform. The price was similar to that of the official store, and both the packaging and the listing appeared legitimate. However, the first warning signs appeared when the device was connected to the official Ledger Live app—it failed the authenticity check.

After disassembling the wallet, investigators discovered modified components and software capable of capturing sensitive user data. Inside were elements not found in genuine devices, including additional communication modules. This clearly indicates the hardware had been deliberately altered.

The scam itself is carefully designed. The packaging includes a QR code that directs users to a fake version of the app. Once installed, it displays a fabricated message confirming the device’s authenticity. In later steps, users may be prompted to enter their seed phrase—the critical access key to their wallet. This gives attackers full control over the funds.

Further analysis revealed that while the device impersonates a Ledger Nano S Plus, it actually uses components from Espressif Systems.

This case highlights how sophisticated cybercriminal methods are becoming. When purchasing a device to store your crypto portfolio, it’s not worth trying to save a few dollars on auction sites. Such equipment should only be bought directly from the manufacturer’s official website.