The Singapore Police Force (SPF) has warned the public about tampered Ledger cryptocurrency hardware wallets. At least two cases have been reported since 10 September 2026, with total losses of about $3.5 million (the advisory does not state the currency). In an advisory issued on 28 October, police said preliminary investigations found that Ledger devices bought from some retail stores in Singapore contained malicious hardware components. These parts could capture users’ recovery phrases or private keys and let criminals move funds without the owners’ knowledge.

Police said they are in contact with Ledger, which is reviewing the affected cases, and that investigations are ongoing. In a 15 October blog post, Ledger said there was no flaw in its chip, operating system or servers. It described the incident as an attack on the distribution channel: a criminal group bought genuine devices, fitted hidden components and put them back into circulation through resellers in Southeast Asia. Ledger said it asked its authorised resellers and distributors to suspend sales in Southeast Asia and Hong Kong.

Police advise crypto holders to follow official advisories from their wallet provider. Stop using any device you suspect has been tampered with, and do not enter your recovery phrase on it. If you think your recovery phrase has been exposed, consider moving the remaining assets to a new, trusted wallet with a newly generated recovery phrase on a clean device. Never share private keys or seed phrases with anyone, including people who claim to represent wallet makers, exchanges or the police.

Source: Singapore Police Force · Additional: Ledger blog