Scammers have stepped out of the digital realm and moved on to good old-fashioned paper mail. On the r/CryptoCurrency forum, user _TheWolfOfWalmart_ sounded the alarm, warning the community about a new scam scheme. People have started receiving physical letters through regular mail that look like official mailings from hardware wallet maker Trezor.

According to _TheWolfOfWalmart_, the letter looks quite solid, but checking the QR code reveals that it leads to a phishing site rather than the official Trezor domain. Yet the scammer's biggest — and most comical — failure was plain carelessness. In the first version of the letter, they forgot to proofread the text and signed it: "Matej Zak, Ledger CEO". In other words, the scammers simply mixed up their competitor's brands.

However, the fraudsters quickly learned from their mistakes. According to user Dusted7, in subsequent batches of letters the signature was corrected to "Trezor CEO". Users virtuzoso and Manitcor confirmed that the scammers even started sticking holographic stickers bearing the Trezor logo onto the letters to give them maximum credibility. User Sweet-Article559 also received one of these mailings with a hologram and noted that the barcode smears easily, even though the letter looks frighteningly plausible at first glance.

The comments also covered why these addresses surfaced. User noviwu97 rightly pointed out that the Trezor customer database did in fact leak online, although the crypto community more often brings up the high-profile Ledger breach. The post's author, _TheWolfOfWalmart_, clarified an important detail: the data leak doesn't make Trezor hardware wallets themselves vulnerable — only customer's mailing addresses have been compromised. User Justanotherlunatic, meanwhile, received a letter despite never having bought a Trezor device. In his view, data traders on the black market simply buy up merged databases of everyone who has ever purchased crypto hardware.

There was room in the thread for practical advice, too. According to user According-Regret-311, mailing out fake letters is genuine mail fraud, and it carries real penalties. He urged everyone who received such a letter to take the trouble and file a complaint with the United States Postal Service.

If you happen to find a message from Trezor in your mailbox, just throw it away — and whatever you do, don't scan the QR codes.