Switzerland
A fake crypto wallet update sent by post
The National Cyber Security Centre (NCSC) reports an unusual campaign. Paper letters, presented as coming from the provider of the recipient's cryptocurrency wallet, invite the recipient to scan a QR code in order to install a security update urgently. The site that opens looks like the provider's own, and most of its links actually lead to the genuine site. Only the section devoted to the supposed update, named “Quantum Resistance”, leads to the fraudsters' page, which asks for the recovery phrase in order to activate the protection.
The scheme relies on combining paper, which people associate with seriousness, with the digital world, so that a letter inspires trust where a simple email would have aroused suspicion. As the NCSC points out, anyone who holds the 12 or 24 words of the recovery phrase has full control of the wallet.
In practiceDo not enter your recovery phrase on any website, even one you reached from a letter bearing the provider's name. If you have already done so, move your funds to a new wallet without delay.
According to NCSC, warning of 31 July 2026 and NCSC, week 33 review, 14 August 2026.