An XRP holder lost 400,000 tokens overnight after falling for a phishing email disguised as a routine hardware wallet update, according to an account shared by crypto adviser George Kaltekis.
A Late-Night Call on Easter
That panicked call reportedly came in at 10pm on Easter night, after the theft. Kaltekis said the timing alone signaled something was wrong, since calls at that hour rarely bring good news.
The victim had roughly 400,000 XRP stored on a hardware wallet. While spending the holiday with family, he received an email appearing to come from Ledger, prompting him to update his device. A phishing email disguised as a Ledger update tricked the victim into a mistake, and believing it to be a routine software update, he clicked through and entered his wallet information.
How the Scam Worked
The victim lost 400,000 XRP after clicking a fake software update link at night, unknowingly handing over the credentials attackers needed to drain the wallet. Kaltekis noted that phishing attempts have grown increasingly convincing in recent years, to the point that even people working in cybersecurity professionally have described struggling to distinguish real communications from fake ones.
Not a Total Loss
He still had about 50,000 XRP held safely in a separate insured custody account, funds that remained untouched because that account required additional verification steps before any transaction could be approved, including a callback confirmation and voice verification before funds could move.
A Broader Lesson on Self-Custody
Kaltekis said the story wasn’t meant to discourage self-custody, which he described himself as a strong supporter of. Rather, he said it illustrates that self-custody, while valuable, isn’t inherently foolproof against sophisticated phishing attempts. A single mistake, made under normal circumstances by someone simply checking email, was enough to result in a significant loss.
The account is one of many similar stories circulating within the crypto industry, serving as a reminder for holders of XRP, Bitcoin, and other digital assets to verify unexpected update requests carefully and consider additional safeguards for larger holdings.
Was this writing helpful?
Story Ends Here
Trust with CoinPedia:
CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.
Investment Disclaimer:
All opinions and insights shared represent the author’s own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.
Sponsored and Advertisements:
Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.
Read the Next News
