{"id":70584,"date":"2026-04-03T02:19:57","date_gmt":"2026-04-03T02:19:57","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/us-attorney-connecticut-forfeits-600000-in-tether-linked-to-ledger-phishing-letter-bitcoin-news\/"},"modified":"2026-04-03T02:19:57","modified_gmt":"2026-04-03T02:19:57","slug":"us-attorney-connecticut-forfeits-600000-in-tether-linked-to-ledger-phishing-letter-bitcoin-news","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/us-attorney-connecticut-forfeits-600000-in-tether-linked-to-ledger-phishing-letter-bitcoin-news\/","title":{"rendered":"US Attorney Connecticut Forfeits $600,000 in Tether Linked to Ledger Phishing Letter \u2013 Bitcoin News"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<h2 dir=\"ltr\">Connecticut <span>Crypto<\/span> Phishing Victim to Recover Funds<\/h2>\n<p dir=\"ltr\">Local media <a href=\"https:\/\/www.fox61.com\/article\/news\/crime\/600k-in-cryptocurrency-from-fraud-scheme-recovered-forfeited-in-connecticut\/520-d589c347-8b92-42dc-992e-fac7fa6e4792\" target=\"_blank\" rel=\"noopener noreferrer\">reported<\/a> that the U.S. Attorney\u2019s Office for the District of Connecticut, working with the FBI\u2019s New Haven Division and Connecticut State Police, filed a civil forfeiture complaint in January 2026 against the seized funds. On March 31, 2026, the U.S. District Court entered a decree of forfeiture transferring the <span>USDT<\/span> to the United States government.<\/p>\n<p dir=\"ltr\">The victim, identified in court documents only as T.M., received an unsolicited letter at their home address in September 2025. The letter appeared to come from \u201cLedger Security and Compliance\u201d and instructed the recipient to complete a mandatory security review of their Ledger hardware wallet.<\/p>\n<p dir=\"ltr\">T.M. followed the letter\u2019s instructions, which gave the scammers access to the wallet\u2019s recovery seed phrase and control over the funds. Investigators traced the stolen assets using <span>blockchain<\/span> analytics. The scammers had moved the funds through multiple intermediary wallets and converted them into <span>USDT<\/span>, a <span>stablecoin<\/span> pegged to the U.S. dollar, in an attempt to obscure the trail.<\/p>\n<p dir=\"ltr\"> <span>Blockchain<\/span> records are public, and the transparent transaction history allowed law enforcement agents to follow the funds and identify holdings exceeding $600,000. The forfeiture complaint, filed as case 3:26-cv-28 in the District of Connecticut, alleged the <span>USDT<\/span> represented proceeds of wire fraud and was connected to money laundering violations.<\/p>\n<p dir=\"ltr\">Civil forfeiture allowed prosecutors to act without identifying or criminally charging the perpetrators, who are believed to be overseas. Interim U.S. Attorney David X. Sullivan stated that criminals should not expect to hold onto stolen proceeds. FBI Special Agent in Charge P.J. O\u2019Brien credited the joint effort between federal and state investigators in tracing and securing the funds.<\/p>\n<p dir=\"ltr\">The recovered <span>USDT<\/span> will be returned to T.M. through the Department of Justice\u2019s asset management process, overseen by the Money Laundering and Asset Recovery Section. The physical-mail phishing tactic used against T.M. has targeted Ledger customers since at least 2021.<\/p>\n<p dir=\"ltr\">Scammers obtained names and home addresses from Ledger\u2019s 2020 <a href=\"https:\/\/news.bitcoin.com\/ledger-wallet-data-leak-dumped-on-raidforums-for-free-company-regrets-the-situation\/\">customer database breach<\/a> and used that information to send professional-looking letters. The letters typically instruct recipients to enter their 24-word recovery phrase on a fake website or scan a QR code that routes to a malicious page.<\/p>\n<p dir=\"ltr\">Ledger has consistently warned customers that it does not send unsolicited mail requesting seed phrases or security verification. Any letter or communication asking for a recovery phrase is a scam.<\/p>\n<p dir=\"ltr\">This case reflects how federal agencies are applying <span>blockchain<\/span> analysis to recover assets in <span>cryptocurrency<\/span> fraud cases. <a href=\"https:\/\/news.bitcoin.com\/report-tether-hires-kpmg-for-first-full-financial-audit-of-usdt-reserves\/\">Tether<\/a>\u2018s cooperation in freezing and transferring seized <span>USDT<\/span> to government-controlled wallets played a role in completing the recovery.<\/p>\n<h2 dir=\"ltr\">FAQ \ud83d\udd0e<\/h2>\n<ul>\n<li dir=\"ltr\" role=\"presentation\"><strong>What was the Ledger phishing scam in Connecticut?<\/strong> A scammer mailed a fake \u201cLedger Security and Compliance\u201d letter to a Connecticut resident, tricking them into surrendering their wallet\u2019s recovery phrase and losing approximately $234,000 in <a href=\"http:\/\/www.bitcoin.com\/get-started\/a-quick-introduction-to-crypto\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">cryptocurrency<\/a>.<\/li>\n<li dir=\"ltr\" role=\"presentation\"><strong>How did the FBI recover the stolen tether?<\/strong> Agents used <a href=\"http:\/\/www.bitcoin.com\/get-started\/what-is-a-blockchain\/\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">blockchain<\/a> analytics to trace the stolen funds through multiple wallets, locating over $600,000 in <a href=\"https:\/\/buy.bitcoin.com\/?utm_source=News\" class=\"lar_link lar_link_outgoing\" target=\"_blank\" rel=\"noopener noreferrer\">USDT<\/a> the scammers had converted the assets into.<\/li>\n<li dir=\"ltr\" role=\"presentation\"><strong>What is civil forfeiture in a <span>cryptocurrency<\/span> case?<\/strong> Civil forfeiture lets federal prosecutors seize assets tied to criminal activity without a criminal conviction, which is useful when suspects are unidentified or located overseas.<\/li>\n<li><strong>How can Ledger users protect themselves from mail phishing?<\/strong> Ledger never sends unsolicited letters requesting seed phrases or security verification, so any such letter should be treated as a scam and reported to the FBI at ic3.gov.<\/li>\n<\/ul>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/us-attorney-connecticut-forfeits-600000-in-tether-linked-to-ledger-phishing-letter\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Connecticut Crypto Phishing Victim to Recover Funds Local media reported that the U.S. Attorney\u2019s Office for the District of Connecticut, working with the FBI\u2019s New Haven Division and Connecticut State Police, filed a civil forfeiture complaint in January 2026 against the seized funds. On March 31, 2026, the [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":70585,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/70584"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=70584"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/70584\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/70585"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=70584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=70584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=70584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}