Staying informed about common online scams is an important part of digital ownership, especially during periods when phishing attempts are more active across the ecosystem.
We want to make sure our community have the absolute best guidance on this, so here is a quick reminder on what Ledger will NEVER do...
20
14
112
20,022
One of the most common attack methods is phishing.
Phishing involves attackers impersonating legitimate services through:
DMs
Emails
Phone calls
Fake websites
Fake Apps
Fake letters
Fake support accounts +many more.
Their objective is usually to obtain your Secret Recovery Phrase (SRP) or sensitive information.
1
8
540
A core principle to remember.
Ledger will never
- Contact you via DM or phone for support
- Ask you to download Ledger Wallet from anywhere other than Ledger.com
- Ask for your 24 word Secret Recovery Phrase (SRP)
- Ask you to enter it online or take a photo of it
Your SRP should remain offline at all times.
1
1
7
200
Ledger takes phishing threats seriously at an operational level.
We partner with specialized security providers to proactively monitor the web, allowing us to detect malicious activity and take immediate action to dismantle fraudulent infrastructure as quickly as possible.
Sep 24, 2026 · 8:26 AM UTC
1
1
7
174
We also maintain a dedicated phishing awareness page to keep our community informed.
It provides clear guidance on
How to identify scams
Common phishing techniques
Ongoing phishing campaigns
Our official communication practices
ledger.com/phishing-campaign…
1
6
185
