Ledger hardware wallet users have received fraudulent letters posing as official correspondence, claiming an "urgent security update" and asking users to scan a QR code and provide their 24-word private recovery phrase to steal control of their wallets. Ledger officially responded, stating that the letters are a scam and emphasizing that the company will never request recovery phrases via phone, messages, or other means.