Staying informed about common online scams is an important part of digital ownership, especially during periods when phishing attempts are more active across the ecosystem. We want to make sure our community have the absolute best guidance on this, so here is a quick reminder on what Ledger will NEVER do...

Anyone using crypto or shopping online today is a potential target for scams. Attackers are refining their tactics, creating highly convincing impersonations of trusted sources. Being aware of how these schemes operate is critical to protecting yourself.

One of the most common attack methods is phishing. Phishing involves attackers impersonating legitimate services through: DMs Emails Phone calls Fake websites Fake Apps Fake letters Fake support accounts +many more. Their objective is usually to obtain your Secret Recovery Phrase (SRP) or sensitive information.

A core principle to remember. Ledger will never - Contact you via DM or phone for support - Ask you to download Ledger Wallet from anywhere other than Ledger.com - Ask for your 24 word Secret Recovery Phrase (SRP) - Ask you to enter it online or take a photo of it Your SRP should remain offline at all times.

Ledger takes phishing threats seriously at an operational level. We partner with specialized security providers to proactively monitor the web, allowing us to detect malicious activity and take immediate action to dismantle fraudulent infrastructure as quickly as possible.

We also maintain a dedicated phishing awareness page to keep our community informed. It provides clear guidance on How to identify scams Common phishing techniques Ongoing phishing campaigns Our official communication practices ledger.com/phishing-campaign…

If you come across something that you think is suspicious, we encourage you to report it directly to our team at phishing@ledger.fr Staying informed, verifying before acting, and reporting suspicious activity helps protect the wider ecosystem 🔐