Ledger Phishing Warning Emerges Amid $86M Theft Probe
A fake Ledger website and app have appeared prominently in Google search results, attempting to trick users into entering their 24-word wallet recovery phrases. Security researcher Cyber Scrilla warned about the site. Claims that it received more than one million visits in 30 days remain unverified; a similar figure in cybersecurity firm Zscaler’s research referred to Google, not the phishing site. Zscaler also documented separate fake Google ads that directed Ledger users to recovery-phrase theft pages.
Separately, Ledger is investigating suspected cryptocurrency theft involving devices sold by Southeast Asian reseller CryptoBilis. Researchers have estimated losses at more than $86 million, but Ledger has not confirmed the amount or number of affected wallets. There is no evidence linking the suspected theft to the phishing site or ads. Ledger advises users never to enter a recovery phrase on a website or in a downloaded app. The warnings highlight ongoing wallet security risks, but no verified victim count or losses have been reported for the newly identified site.
Neutral
The reports do not identify a specific cryptocurrency whose price is directly affected, and Ledger has no commonly traded token. In the short term, phishing warnings and the unresolved theft investigation could heighten trader concerns about wallet security and prompt some users to move funds or review custody practices. Such reactions may add volatility to individual assets if credible losses are confirmed, but no direct price effect is established here. Over the longer term, the story may reinforce demand for stronger security and self-custody practices, yet the unverified visit claim, unconfirmed theft figures and lack of evidence connecting the incidents limit its market significance. The expected direct price impact on a particular cryptocurrency is therefore neutral.