I received a physical, fraudulent letter via the U.S. Mail from an individual or entity impersonating the hardware wallet company, Ledger. The letter claimed that Ledger was updating its utilities and required action on my part. The letter contained a QR code instructing me to scan it and input my security data. Believing the correspondence to be legitimate corporate outreach stemming from my customer relationship with Ledger, I scanned the QR code and entered my data. Immediately upon doing so, my wallet was entirely drained of its assets. The physical letter and its mailing envelope remain in my possession as evidence. Additionally, I have preserved screen recordings of all subsequent transactions, destination wallet addresses, transaction hashes, and historical ledger movements associated with the perpetrator's addresses. Financial Loss Summary Asset Type: XRP (Ripple) Total Stolen Quantity: 50,721.658417 XRP Estimated Fiat Value: ~$68,100 USD Blockchain Identification Details Victim Wallet Address (My Account):
rhoYgjb3BxdnuFqYUoeorkEFog9swkdNFD Perpetrator's Receiving Wallet Address:
rBo9zHeV5viurHyahYX2iLTHcDBw8hf2xC Theft Transaction Hash (TxID):
E994AD17D046494B647B4C531663AB5E3E68A83C90518DD67450347884B99CD7 On-chain analysis of the perpetrator’s address reveals a clear trail linking back to a custodial exchange, which may assist law enforcement in identifying the suspect: The criminal's receiving address (rBo9zHeV5viurHyahYX2iLTHcDBw8hf2xC) was created approximately two months ago. It was funded by an intermediary wallet address: rPGKib86uvXerhmyQ1o9Vf5M7EYHqG9e9c. That intermediary wallet was originally funded directly from a Crypto.com exchange wallet address: r4DymtkgUAh2wqRxVfdd3Xtswzim6eC6c5. The transaction hash for this specific exchange funding event is: 62119812CD704E6342BAD2A77E6E6746FB2F3BB55D63E13DCDDB36570EF3C84B.