SafePal Data Breach Victims Are Now Getting Scam Letters at Home

Scammers are mailing fake SafePal letters to Italian customers’ homes, using names, addresses and order details leaked in a breach that exposed nearly 40,000 buyers of the company’s crypto hardware wallets. SafePal says its wallets remain secure. The letters target owners instead. Anyone who enters a wallet’s recovery phrase, the backup words that rebuild it on any device, into a fake site hands over every coin it holds. How the Fake SafePal Letters Work The letters claim the recipient’s wallet has a firmware flaw, meaning a problem in the software built into the device. A QR code opens a fake SafePal site hosted on Arweave, a network built to store files permanently. Both the letter and the site show the customer’s real name, address and order details.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to BeInCrypto.