Ledger Investigates $86M Theft Linked to Fake Website Scam
A fraudulent Ledger website is being investigated for stealing wallet recovery phrases, resulting in significant crypto losses.
A fraudulent Ledger website is being investigated for stealing wallet recovery phrases, resulting in significant crypto losses. This is an original TLT brief synthesising 2 outlets (Crypto.news, DailyCoin), with their figures cross-checked, plus live market data, as of Mon, 12 Oct 2026 09:15:02 UTC.
This incident highlights the growing threat of sophisticated phishing attacks targeting crypto users and the potential for substantial financial losses when wallet security is compromised.
- A fake Ledger website is stealing wallet recovery phrases through Google Search.
- Crypto losses linked to the scam are estimated at $86 million.
- Ledger is investigating the incident and its connection to reseller CryptoBilis.
Crypto.news and DailyCoin both report that a fraudulent Ledger website is being used to steal wallet recovery phrases, resulting in estimated losses of $86 million. DailyCoin specifically links the incidents to a reseller named CryptoBilis, while Crypto.news focuses on the broader investigation into the scam. Both outlets agree on the $86 million loss figure and the involvement of a fake Ledger website.
- Ledger Investigates $86M Crypto Theft Linked to Southeast Asian Reseller
- Ledger Investigates $86M in Losses Linked to Southeast Asian Reseller CryptoBilis
- Ledger Investigates $86M Theft Linked to Fake Website Scam — this brief
A fraudulent website posing as Ledger is being used to steal cryptocurrency wallet recovery phrases, according to multiple outlets. The scam involves a fake version of the Ledger website appearing in Google Search results, tricking users into entering their wallet recovery phrases.
The scam has resulted in significant crypto losses, with estimates ranging from $86 million according to both Crypto.news and DailyCoin. The incidents are being investigated by Ledger, which is looking into the connection between the scam and a reseller named CryptoBilis.
Crypto.news and DailyCoin both corroborate the $86 million loss figure, but DailyCoin provides additional detail by linking the incidents to CryptoBilis. This suggests a potential breach or compromise at the reseller level, which may have exposed user data.
The incident highlights the increasing sophistication of phishing attacks targeting cryptocurrency users. As more people adopt digital assets, scammers are developing more elaborate schemes to exploit security vulnerabilities and gain access to wallets.
The broader crypto market remains relatively stable, with a total market cap of $2.91 trillion and 
Bitcoin up 0.98% in the last 24 hours. However, this incident serves as a reminder of the risks associated with storing cryptocurrencies and the importance of maintaining robust security practices.
1 key figure independently matched across 2 outlets reporting this story.
TLT extracts the figures each outlet reports and flags the ones that agree. Numbers cited by only one outlet are attributed in the brief, not shown as corroborated.
Ledger Investigates $86M Theft Linked to Fake Website Scam — questions & answers
How were users tricked into giving away their recovery phrases?
Users were directed to a fake Ledger website through Google Search, where they entered their wallet recovery phrases.
Who is CryptoBilis and what is their role in the scam?
CryptoBilis is a reseller linked to the incidents, though the exact nature of their involvement is still under investigation.
What is Ledger doing to address the issue?
Ledger is actively investigating the incidents and their connection to CryptoBilis to determine the extent of the breach and prevent further losses.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from Crypto.news, DailyCoin, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.