A fake Ledger device arrived, and all assets were stolen. Terrifying. As expected, KYC measures, including address registration, must be properly implemented. Full translation below. --- (1/8) James (a pseudonym) thought he was fully secure. He used a Ledger hardware wallet, never shared his 24-word recovery phrase, and followed all cryptocurrency security advice. But one day... a package arrived. 🧵👇 (2/8) ✅ It looked authentic. ✅ The box had the Ledger logo. ✅ The device appeared genuine. The letter inside also seemed official, explaining that it was a replacement due to a security breach. However, James didn’t realize: 🤯 This was the beginning of an advanced scam. (3/8) The letter stated: "Your old device is compromised. Set up this new device and input your recovery phrase to secure your assets." James hesitated. But the letter included actual leaked data—his name, address, and even his email address. Because of this, he followed the instructions. (4/8) 🔌 He connected the "new" Ledger. 🔎 It looked identical to the Ledger he had been using. He entered his 24-word recovery phrase into the app he was instructed to download. 😰 That was the moment he lost everything. (5/8) ⏱️ Within minutes, his wallet was emptied. ⚠️ BTC (Bitcoin), ETH (Ethereum), NFTs—all gone. 🚩 The device was fake. It had been modified with malware to steal the recovery phrase and drain the wallet’s assets ☠️ (6/8) Scammers exploited the 2020 Ledger data breach (over 270,000 customer records leaked) to target actual victims. 😓 These scams are real. 🫣 They may not be as common now, 💀 ... but the threat hasn’t disappeared. (7/8) Golden rules for cryptocurrency security: 🚫 Ledger will never ask you to input your recovery phrase. 🚫 Never input your phrase into a new device you didn’t order. (8/8) 😥 James’s story is a painful yet crucial warning. 👉 And he’s not the only victim.