Coldcard Phishing Scams Drain Nearly $130 Million

Crypto users are facing a wave of sophisticated phishing attacks targeting hardware wallet owners. Attackers are sending emails that claim to be from companies like Coldcard, warning customers about a fake coordinated hardware audit. These messages direct users to a malicious website that mimics the official brand.

Once on the fake site, victims are prompted to download software under the guise of security updates. Instead, this program installs remote access tools that allow hackers to take control of the user machine and drain their crypto holdings. Total losses reported from these specific scams are already nearing $130 million.

Security experts remind everyone that hardware wallet manufacturers will never ask you to perform audits via email links. Always type the official web address directly into your browser rather than clicking links provided in messages. Check your hardware wallet screen before confirming any transactions to ensure you are actually signing what you intended.