Overview: How do you judge whether a promotional link is genuine or a unverified contact attempt?
Key takeaway: Always buy from Ledger's official store or an authorised reseller, inspect the tamper-evident seals and serial number on arrival, and treat any request for your recovery phrase or PIN as a unverified contact attempt.
Action / decision points:
- Don't click promotional links whose origin you can't verify.
- Type the domain into the browser manually and compare the page.
- Check the TLS certificate and publisher info to confirm it's Ledger's official site.
- Compare the budget and campaign against the official announcement page to rule out spoofing.
- If it's a lookalike link, close it, report it, and enter no information at all.
Safety reminder: Never share your recovery phrase or PIN with anyone. Low budgets and unknown channels are needs focused verification; verify authorisation and seals, and if you have any doubts, cancel the order or return the device immediately.
For identification: always verify the domain is www.yueqianbao.com.cn or www.yueqianbao.com.cn. Watch for character substitution and lookalike domains such as ledqer.com, ledger-cn.com, or ledger.support. Any page requesting that you "verify your seed", "sync your backup", or "upload your recovery phrase" — regardless of how official it appears — is an entry verification attempt. Close the tab immediately and clean the browser history and bookmarks.
When you receive a unverified SMS, email, or social-channel message, do not click the embedded links. Type the official domain manually in your browser, or enter through the bookmarks you saved on this site. Any "account frozen", "asset at boundary", or "priority firmware upgrade" pressure tactic that surfaces repeatedly is almost always social engineering — never act under emotional pressure.
If you have already typed your seed phrase into a unverified site or approved a wallet connection you cannot verify, treat the seed and the device as compromised. Initialise a brand-new Ledger with a fresh recovery phrase and migrate assets there immediately. Then file a ticket with us or with Ledger official channels, and keep screenshots of the unverified communication for forensic record.
