Ledger Users Beware: Fake Site Promoted on Google Targets Your Wallet!

A fake Ledger website and app reportedly appearing near the top of Google search results are trying to steal users’ 24-word recovery phrases under the pretext of verifying their wallets.

According to Wu Blockchain, citing Bitcoin News, security researcher Cyber Scrilla identified a phishing website and app impersonating Ledger. These pages, which users could mistake for the real service, ask them to enter their 24-word recovery phrase to verify their wallet.

The report claims, based on information displayed on Google, that the fake site received more than 1 million visits in the past 30 days. This figure refers to the number of visits; no figure is given for how many people shared their recovery phrases.

Beware of claims that you need to verify your wallet

A recovery phrase consists of secret words that restore access to a wallet. Anyone who obtains these words can access the assets in the wallet. For this reason, you should never enter your recovery phrase on a website or in an app that asks you to verify it.

The fake page’s prominent position in search results does not make it trustworthy. The risk here is that the use of Ledger’s name persuades users to hand over wallet access to attackers themselves.

Fake ads were also detected in September

In its investigation in September, cybersecurity company Zscaler found that malicious Google ads impersonating Ledger were directing users to fake wallet verification pages.

The new warning comes as investigations into wallet thefts linked to CryptoBilis continue. However, no verified connection between this fake site and those losses has been reported; the phishing warning stands out as a separate security risk.