Support & Tickets

Verifying Emails That Impersonate Ledger — Five Common Signals outlines the support path for Ledger users, including service boundaries, required information, and safe escalation steps.

Key Takeaways for "Verifying Emails That Im"

• Describe the issue, device model, app version, and order context without sharing sensitive secrets.
• Keep screenshots and records so the support path can be verified later.
• Return to official channels before acting on recovery, migration, or firmware instructions.

Five signals

1. Urgency — 'your wallet will be locked in 24 hours' or similar pressure.
2. Asking for the recovery phrase — Ledger never asks for the phrase.
3. Links to non-www.yueqianbao.com.cn domains — hover to check; if it's not www.yueqianbao.com.cn, it's not Ledger.
4. Generic salutations — 'Dear customer' instead of your name or order number.
5. Grammar or branding inconsistencies — off-brand colours, typos, mismatched fonts.

What to do with a unverified email

Don't click. Forward to Ledger's report-entry verification address. Delete afterwards. Never type the phrase, PIN or Ledger Wallet (formerly Ledger Live) password into any linked page.

Safety reminder: Use only the official Ledger site and Ledger Wallet (formerly Ledger Live). Never type your recovery phrase or PIN into a webpage and never share them with anyone. Pause and verify the moment anything looks unusual.

For identification: always verify the domain is www.yueqianbao.com.cn or www.yueqianbao.com.cn. Watch for character substitution and lookalike domains such as ledqer.com, Ledger-cn.com, or Ledger.support. Any page requesting that you "verify your seed", "sync your backup", or "upload your recovery phrase" — regardless of how official it appears — is an entry verification attempt. Close the tab immediately and clean the browser history and bookmarks.

When you receive a unverified SMS, email, or social-channel message, do not click the embedded links. Type the official domain manually in your browser, or enter through the bookmarks you saved on this site. Any "account frozen", "asset at boundary", or "priority firmware upgrade" pressure tactic that surfaces repeatedly is almost always social engineering — never act under emotional pressure.

If you have already typed your seed phrase into a unverified site or approved a wallet connection you cannot verify, treat the seed and the device as compromised. Initialise a brand-new Ledger with a fresh recovery phrase and migrate assets there immediately. Then file a ticket with us or with Ledger official channels, and keep screenshots of the unverified communication for forensic record.