Connecticut Crypto Phishing Sufferer to Get better Funds
Native media reported that the U.S. Lawyer’s Workplace for the District of Connecticut, working with the FBI’s New Haven Division and Connecticut State Police, filed a civil forfeiture criticism in January 2026 towards the seized funds. On March 31, 2026, the U.S. District Courtroom entered a decree of forfeiture transferring the USDT to america authorities.
The sufferer, recognized in court docket paperwork solely as T.M., acquired an unsolicited letter at their residence deal with in September 2025. The letter appeared to come back from “Ledger Safety and Compliance” and instructed the recipient to finish a compulsory safety assessment of their Ledger {hardware} pockets.
T.M. adopted the letter’s directions, which gave the scammers entry to the pockets’s restoration seed phrase and management over the funds. Investigators traced the stolen belongings utilizing blockchain analytics. The scammers had moved the funds by a number of middleman wallets and transformed them into USDT, a stablecoin pegged to the U.S. greenback, in an try to obscure the path.
Blockchain data are public, and the clear transaction historical past allowed regulation enforcement brokers to comply with the funds and establish holdings exceeding $600,000. The forfeiture criticism, filed as case 3:26-cv-28 within the District of Connecticut, alleged the USDT represented proceeds of wire fraud and was related to cash laundering violations.
Civil forfeiture allowed prosecutors to behave with out figuring out or criminally charging the perpetrators, who’re believed to be abroad. Interim U.S. Lawyer David X. Sullivan acknowledged that criminals shouldn’t anticipate to carry onto stolen proceeds. FBI Particular Agent in Cost P.J. O’Brien credited the joint effort between federal and state investigators in tracing and securing the funds.
The recovered USDT can be returned to T.M. by the Division of Justice’s asset administration course of, overseen by the Cash Laundering and Asset Restoration Part. The physical-mail phishing tactic used towards T.M. has focused Ledger prospects since not less than 2021.
Scammers obtained names and residential addresses from Ledger’s 2020 buyer database breach and used that data to ship professional-looking letters. The letters sometimes instruct recipients to enter their 24-word restoration phrase on a pretend web site or scan a QR code that routes to a malicious web page.
Ledger has constantly warned prospects that it doesn’t ship direct mail requesting seed phrases or safety verification. Any letter or communication asking for a restoration phrase is a rip-off.
This case displays how federal companies are making use of blockchain evaluation to get well belongings in cryptocurrency fraud instances. Tether‘s cooperation in freezing and transferring seized USDT to government-controlled wallets performed a job in finishing the restoration.
FAQ 🔎
What was the Ledger phishing rip-off in Connecticut? A scammer mailed a pretend “Ledger Safety and Compliance” letter to a Connecticut resident, tricking them into surrendering their pockets’s restoration phrase and dropping roughly $234,000 in cryptocurrency. How did the FBI get well the stolen tether? Brokers used blockchain analytics to hint the stolen funds by a number of wallets, finding over $600,000 in USDT the scammers had transformed the belongings into. What’s civil forfeiture in a cryptocurrency case? Civil forfeiture lets federal prosecutors seize belongings tied to prison exercise with out a prison conviction, which is beneficial when suspects are unidentified or situated abroad. How can Ledger customers shield themselves from mail phishing? Ledger by no means sends unsolicited letters requesting seed phrases or safety verification, so any such letter must be handled as a rip-off and reported to the FBI at ic3.gov.
