scammers are sending physical letters to Ledger hardware wallet users, impersonating Ledger company and asking users to provide private mnemonic phrases in order to gain control of the wallet. These letters use Ledger's logo, company address, and reference number to disguise their authenticity, claiming that users need to immediately perform a "critical security update".

Ledger officials have confirmed that this is a scam and remind users that they will never ask for mnemonic phrases in any way.