Prosecutors in Connecticut said authorities have recovered and seized more than $600,000 in cryptocurrency connected to a phishing scam that targeted Ledger hardware wallet users. The case highlights how social engineering remains a major threat in crypto, even for users relying on cold storage devices.
Fake Ledger notice triggered the theft
According to the reported details, the incident began in September 2025, when a Connecticut resident received a fraudulent letter claiming to be from the “Ledger Security and Compliance Department.” The letter instructed the victim to complete a so-called “mandatory security check.” After following the directions, the victim’s hardware wallet was compromised, resulting in a loss of about $234,000.
The scheme shows how scammers can exploit brand trust by imitating official security communications. Hardware wallets are widely considered one of the safer options for storing digital assets, but that protection can be undermined when users are tricked into taking actions based on fake instructions.
FBI and state police traced the funds
After the theft, the FBI and Connecticut state police tracked the movement of the stolen funds and ultimately recovered roughly $600,000 in crypto. That figure is substantially higher than the amount reportedly lost by the identified victim, suggesting investigators may have seized a broader pool of assets linked to the same scam operation.
The available information does not specify the exact composition of the recovered assets, whether all funds will be returned to victims, or whether criminal charges have already been filed. What is clear is that law enforcement was able to identify and seize crypto connected to the fraud.
A reminder for wallet users
The case is another warning that crypto scams are not limited to email, social media, or messaging platforms. Fraudsters may also use physical mail and other seemingly legitimate channels to pressure users into revealing sensitive information or performing risky actions. Any request involving seed phrases, private keys, or urgent “security verification” steps should be treated with extreme caution.
From an enforcement perspective, the recovery also reflects growing capability among authorities to trace blockchain transactions and freeze illicit assets. While that improves the chances of fund recovery, prevention remains the most effective defense for crypto holders.