Skip to main content

Published on 31 July 2026

Phishing targeting crypto wallets: Letters with a QR code are currently in circulation

The NCSC has received several reports of letters containing a QR code and prompting recipients to download an urgent update for various crypto wallets. However, after scanning the QR code, recipients are redirected to a phishing website where they are asked to enter their recovery phrases. If these are disclosed, attackers can gain complete control over the crypto wallet in question and steal the assets it contains. Never disclose passwords or recovery phrases to third parties.