# Fake Ledger Sites Surface in Google Searches, Targeting Recovery Phrases

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/29585
Published: 2026-10-10T15:33:42.000Z
Updated: 2026-10-10T15:33:42.000Z
Section: Technology

> The fake website allegedly received more than 1 million visits in 30 days as Ledger investigates a suspected $86 million wallet theft involving CryptoBilis customers.

Fake websites and an application impersonating hardware-wallet maker Ledger are appearing prominently in Google search results and targeting users’ 24-word recovery phrases, security researcher Cyberscrilla warned Saturday.

The fake website allegedly received more than 1 million visits during the past 30 days. Recovery phrases control access to crypto wallets, making their disclosure a direct security risk for users.

The warning comes as Ledger investigates a suspected wallet theft involving customers of Southeast Asian distributor CryptoBilis. The losses are estimated at about $86 million.

Ledger has also faced malicious Google advertisements impersonating the company and directing users to fake wallet-verification pages. The latest warning highlights the risk of entering recovery phrases into websites that appear in search results, even when their branding resembles a legitimate hardware-wallet provider.

Users should never enter a hardware wallet’s recovery phrase on any website.