Crypto Wallet Phishing by Letter: Why the QR Code From Your Postbox Wants Your Recovery Phrase

If a letter arrives in your postbox urging an urgent security update for your crypto wallet and supplying a QR code for it, that is phishing. No manufacturer and no exchange announces a wallet update by post, and there is no legitimate process in which you type your recovery phrase into a website. The Federal Office for Cybersecurity BACS reported on August 18, 2026, in its weekly review for week 33, that it had received various reports about precisely such letters.

What is new about this wave is the delivery route rather than the ploy. Phishing normally arrives by email or text message, because both cost nothing. A letter costs printing, enveloping and postage, and anyone going to that effort is counting on a hit rate that justifies it. That is exactly why the postal route became interesting to attackers only once they had address lists they knew belonged to crypto owners.

Crypto wallet phishing by letter: what BACS reported on August 18

The sequence the authority describes is short. A letter calls on the recipient to download an urgent update for various crypto wallets. A QR code is enclosed for that purpose. Anyone who scans it lands on a phishing website on which the recovery phrase is to be entered. Anyone typing it in there hands over complete control of the crypto wallet concerned, according to BACS.

… Continue reading the full article at the original source below.