Visible tampering is a stop-use event. Do not plug in, initialize, or transact with a Ledger device whose box appears opened, altered, or compromised. Keep the device and all packaging intact, record the seller and order details, and contact Ledger Support through its official support channel. A legitimate device does not arrive with a recovery phrase or PIN already set.
What to do immediately
Stop using the package and device
Ledger’s buying guidance says that if a package from an authorized reseller, including Amazon, appears opened, altered, or compromised, you should not use the device and should contact Ledger Support immediately. Do not connect it to a computer or phone, initialize it, enter a PIN, approve a transaction, or send cryptocurrency to an address created by it.
As an Amazon Associate I earn from qualifying purchases.
Do not try to “test” a suspicious unit by loading a small amount of cryptocurrency. A tampered device or a recovery phrase supplied by someone else may already be under an attacker’s control, and a test transfer can become an irreversible loss.
Preserve evidence
- Keep the hardware wallet, box, seals, inserts, cables, cards, and any printed instructions together.
- Photograph the outer shipping carton, product box, seals, serial labels, damage, and anything that appears replaced or missing.
- Save the order confirmation, invoice, tracking record, seller name, marketplace listing, and delivery date.
- Write down what you observed and when. Do not remove labels, discard packaging, or attempt repairs before Support tells you what to do.
Use only official support
Start a case through Ledger’s official support chat or the support domains listed in Ledger’s own help pages. Ledger says it does not provide phone support. It also says that it will never contact users by text message or phone call and will never ask for the 24-word recovery phrase.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Recognize the warning signs
Opened or altered packaging
Broken seals, resealed plastic, cut tape, mismatched labels, missing inserts, unusual handwriting, or a box that does not match the listing are reasons to pause. You do not need to prove that an attacker altered the package. The credible possibility of interference is enough to stop and ask Ledger for a return or replacement decision.
A preconfigured PIN or recovery phrase
Ledger states: “A legitimate Ledger device never comes with a recovery phrase or PIN code pre-configured. Ever.” A phrase printed on a card, written on paper, included in instructions, shown in an email, or supplied by a seller is not a setup shortcut. A device that arrives with a PIN already chosen is also unsafe to use.
Never move funds to accounts generated from a supplied phrase or PIN. Whoever created that phrase may still possess it, and anyone who knows a recovery phrase can generally recreate the wallet elsewhere.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteAn unsolicited device or replacement offer
Be especially cautious if the hardware arrived without an order, was offered as a “replacement” by an unexpected caller, or came with instructions to contact a number or scan a code. Ledger documented a May 2021 unsolicited-device scam in which approximately $78,000 was drained within 30 minutes. That figure describes Ledger’s example, not a general incident rate, but it illustrates why an unexpected device should not be initialized.
Recovery phrase and PIN rules
How a safe setup works
- Obtain an unopened device through Ledger.com or a currently listed authorized reseller.
- Download the official Ledger Wallet application from Ledger’s official website or the official iOS or Android store listing.
- Let the device generate a new recovery phrase during setup. The words must appear on the device’s own screen, not in the computer or phone application.
- Write the words down in the order shown. Check every word and its position on the device before continuing.
- Choose a PIN on the device. Do not use a PIN supplied in the box, by a seller, or by a support contact.
- Store the written phrase offline and privately. Do not photograph it, place it in cloud storage, email it, or enter it into a website.
Never disclose or type the 24 words
Ledger’s phishing guidance says: “Never share the 24 words of your recovery phrase with anyone under any circumstances.” It also says you should never enter those words anywhere other than directly into the device. In practice, that means no website, desktop form, mobile app, chat window, screen-sharing session, browser extension, or “verification” page.
Rank #2
- Simply & securely take control of your digital assets and identity with the all-in-one Ledger Wallet crypto app and Ledger Flex touchscreen signer.
- Digital asset control at your fingertips: manage 15,000+ crypto across multiple chains. Earn rewards. Top up & share with ease. Explore DeFi with confidence. Collect and showcase NFTs. Make informed choices with clarity.
- Connect effortlessly with Ledger Wallet: pair your secure Ledger signer with the all in one Ledger Wallet crypto app to manage thousands of digital assets across multiple devices and accounts with Ledger Sync from a single, secure dashboard.
- Cutting-edge design: monitor the market, compare rates, and Clear Sign transactions on the secure, high resolution, 2.8'' E Ink touchscreen.
- This is what security feels like: Ledger touchscreen signers all come with a private, offline, PIN-protected backup, Ledger Recovery Key, to never lose access to your assets.
There is one important distinction: when you deliberately restore your own wallet, the words are entered on the hardware device using its controls. They are not typed into Ledger Wallet or another computer or phone. Ledger Support will not ask you to read, type, photograph, or confirm the phrase.
Check whether the device is genuine
Run Genuine Check through the official application
After Support has assessed the packaging issue, use only the official Ledger Wallet application to perform the device’s Genuine Check. Do not download an installer from a message, QR code in the box, search advertisement, or support conversation.
Recommended Free Tools
- Install the official application from Ledger’s website or the official iOS or Android store.
- Connect the device only when the official application instructs you to do so.
- Open the device-authenticity or Genuine Check function shown during setup.
- Follow the on-screen challenge and confirmation steps without entering a supplied phrase.
- If the check fails, stop. Do not initialize or use the device; preserve the evidence and report the failure to Ledger Support.
What Genuine Check proves
Ledger describes Genuine Check as a cryptographic verification of the secure element. The device answers a challenge with a factory-injected key, and the application verifies the resulting signature against Ledger’s servers. Ledger’s developer documentation describes the underlying attestation model as a device keypair, an issuer certificate, and a secure channel that establishes that the hardware is an authenticated Ledger device. That documentation was last updated September 23, 2026.
A successful result supports the conclusion that the secure element is an authentic, authenticated component. It does not establish who handled the package, whether the unit was previously opened, or whether the delivery chain was intact.
Why a passing check is not a clean bill of health
Ledger explicitly warns that Genuine Check cannot detect unauthorized physical modifications, such as spying implants, if the original secure element remains intact. Therefore, a suspiciously opened package or credible evidence of physical interference remains a support case even when the cryptographic check passes. Do not allow a passing screen to override the chain-of-custody concern.
Rank #3
- More than just crypto: confirm your device is authentic with Genuine Check, manage all your logins with Ledger Security Key, detect common scams with Transaction Check and more.
- Industry-defining security: battle-tested by the Donjon's white hat hackers, protected by the Secure Element, and powered by Ledger OS.
- Connect effortlessly with Ledger Wallet: pair your secure Ledger signer with the all in one Ledger Wallet crypto app to manage thousands of digital assets across multiple devices and accounts with Ledger Sync from a single, secure dashboard.
- Playful, user-friendly design: monitor the market, compare rates and Clear Sign all transactions on the secure 2.8'' anti-glare, scratch-resistant touchscreen.
- This is what security feels like: Ledger touchscreen signers all come with a private, offline, PIN-protected backup, Ledger Recovery Key, to never lose access to your assets.
If you already initialized or used the device
Contain the potential exposure
If you entered a phrase supplied with the product, used a phrase that another person may have seen, or initialized a device that now appears suspicious, treat the wallet as potentially compromised. Stop using that recovery phrase and stop approving new transactions from the suspect device until Ledger Support gives case-specific instructions.
Do not reuse the possibly exposed phrase on another device. Creating a second device with the same words does not make the phrase secret again; anyone who saw it can still restore the wallet.
Plan any asset move carefully
Assets should be moved only through a trusted recovery plan using a freshly generated recovery setup on an uncompromised device. The exact order depends on whether the original phrase was exposed, whether transactions are pending, and whether you still control the accounts. Ask Ledger Support for guidance before transferring funds if you are uncertain.
Never follow recovery instructions from an unsolicited caller, text message, direct message, pop-up, or lookalike website. An attacker may pressure you to “sweep” funds, reveal the phrase, or approve a transaction that sends assets to the attacker.
Record what happened
- Note whether the phrase came from the device screen or from printed material.
- Record when the device was connected, which application was used, and whether any transaction was approved.
- List the accounts or assets that may be affected without publishing addresses or recovery words in a support chat.
- Tell Support exactly what was entered and what was displayed; do not conceal a phrase exposure.
How to avoid support impersonation
Messages Ledger will not send
Ledger’s phishing-campaign guidance says “Ledger will never contact you via text message or phone call.” Treat any unexpected message claiming that your wallet is frozen, your identity must be verified, or your phrase must be “synchronized” as a scam. Do not click its links or install its software.
Rank #4
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Choose the colors that match your style: express your personality and your crypto management mood, color code your signers, one for each use (trading, staking, HOLDing...).
Information Support should never request
- Your 24-word recovery phrase or a photograph of it.
- A PIN, passphrase, or one-time code displayed on the device.
- Remote-control access to your computer or phone.
- An approval of a transaction intended only to “verify” ownership.
Use the support chat reached from Ledger’s official support pages, and verify the domain before entering any account information. If a conversation moves to a different messaging service or asks you to call a number, end it and start a new case through the official channel.
Buying a replacement safely
Choose a controlled seller
For a replacement, buy from Ledger.com or a reseller currently listed by Ledger. On Amazon, inspect the exact “Sold by” field because several sellers can appear on one product page. A familiar product listing alone does not establish which seller will fulfill your order.
When the replacement arrives, compare the model and packaging with the order, inspect for signs of opening, and stop again if anything is inconsistent. A replacement should generate its own phrase during setup; it should not arrive with words or a PIN ready to use.
Compare the risks before accepting any device
| Situation | What is established | Safe next action |
|---|---|---|
| Package visibly opened or altered | Chain of custody is uncertain; authenticity is not established by appearance alone. | Do not connect it. Preserve everything and contact Ledger Support. |
| Prewritten phrase or supplied PIN | The secret was created outside your control and may be known to someone else. | Do not use it or fund its accounts. Request support and a replacement. |
| Genuine Check fails | The application could not verify the device’s cryptographic authenticity. | Stop immediately and report the failure. |
| Genuine Check passes but physical tampering is credible | The secure element authenticated; physical modifications and delivery history remain unresolved. | Do not dismiss the concern. Follow Ledger’s return or replacement instructions. |
| Phrase may have been observed or entered elsewhere | The wallet’s recovery secret may be compromised. | Stop using it and obtain a trusted, case-specific recovery plan before moving assets. |
What the authenticity check cannot tell you
Attestation answers a narrow question: does the device possess the expected cryptographic identity associated with an authentic Ledger secure element? It does not provide a complete history of the box, prove that no one opened the unit during shipping, or certify that every surrounding component is free of unauthorized modification.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteThat distinction explains why both checks matter. The software verification helps identify counterfeit or unauthenticated hardware, while the packaging and seller review address chain of custody. A credible physical-tampering concern should be handled through Support even when the cryptographic identity is valid.
Quick Recap
Final safety checklist
- Stop using any opened, altered, or unsolicited package.
- Do not trust a printed recovery phrase or preselected PIN.
- Generate a new phrase on the device and keep it offline.
- Never share the 24 words or enter them into a computer, phone, website, or support chat.
- Use the official application and run Genuine Check, understanding its physical-tampering limit.
- Contact Ledger through official support channels; ignore calls and texts claiming to be Ledger.
- Buy replacements from Ledger.com or a currently listed authorized reseller, checking the exact marketplace seller.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
