How to Buy a Hardware Wallet Safely: Lessons From the Ledger Reseller Tampering Reports

Disclosure: This article contains affiliate links. As an Amazon Associate, Daily Crypto Hub earns from qualifying purchases at no extra cost to you.

A hardware wallet is only as trustworthy as the path it took to reach you. That point became painfully concrete this month when Ledger confirmed it had found an unauthorized hardware implant in at least one device sold through CryptoBilis, a reseller in Southeast Asia, and suspended that reseller’s sales. On-chain investigators have estimated losses tied to the incident at roughly $86 million to $93 million across around 300 wallets, though Ledger itself has not confirmed a total. Reports say the implant captured the recovery phrase shown on the screen during setup and sent it out over a hidden cellular connection, and that the device still passed Ledger’s built-in genuine check.

Ledger has said its direct sales channels are not affected. Still, the episode is a useful reminder that supply-chain risk is real for every brand. Here is how to buy and set up a hardware wallet so that risk stays as small as possible.

Rule 1: Buy from the manufacturer or its official storefront

The safest source is the manufacturer’s own website. The next best option is a manufacturer-operated storefront on a large retailer, where the listing clearly says the item is shipped and sold by the brand or by the retailer itself, not by an unknown third-party seller. Avoid secondhand marketplaces, auction sites, “discounted” listings and unfamiliar resellers, even ones that claim to be authorized. In this case, the reseller involved was an authorized partner, which is exactly why the direct route matters.

Popular, well-established options include:

• Trezor Safe 3 – an affordable device with a secure element and open-source firmware.
• Ledger Nano S Plus – Ledger’s entry-level USB wallet.
• Ledger Nano X – adds Bluetooth and a built-in battery.
• Keystone 3 Pro – an air-gapped wallet that signs via QR codes.

When shopping on Amazon, check the “Ships from” and “Sold by” fields before you check out. If either names a seller you do not recognize, skip it.

Rule 2: Inspect the package, but do not rely on it

Check for damaged seals, re-taped boxes, scuffed cases or loose components. Anything that looks off is a reason to return the device unopened and contact the manufacturer. That said, a skilled attacker can reseal packaging convincingly, and in the CryptoBilis case the device’s own authenticity check reportedly passed. Inspection is a filter, not a guarantee. Where you bought the device matters more.

Rule 3: Never accept a pre-made recovery phrase

A legitimate hardware wallet generates your 12- or 24-word recovery phrase on its own screen during first setup. If a device arrives with a recovery card that already has words printed or written on it, or if any setup instruction tells you to use words someone else supplied, treat the device as compromised. Likewise, never type your recovery phrase into a computer, phone, website or app. The only place it should ever be entered is on the hardware wallet itself, and only when restoring.

Rule 4: Back up your seed on metal, offline

Paper backups can burn, fade or get thrown away. A steel backup survives fire and water and keeps your phrase off any connected device. Options include the Billfodl and the Cryptosteel Capsule. Store it somewhere private and secure, such as a home safe like a SentrySafe fireproof safe. For what you should and should not keep on digital media, see our guide to encrypted USB drives for crypto backups.

Rule 5: Test before you trust

• Update firmware using only the manufacturer’s official app downloaded from its official site.
• Send a small test amount first, then verify that you can restore the wallet from your backup before moving larger sums.
• Verify addresses on the device screen, not just on your computer, every time you receive or send.
• Watch for unexpected behavior, such as a device that seems to have been initialized already or that asks for unusual permissions.

Rule 6: Reduce single-device risk for larger holdings

If you hold a meaningful amount, consider not relying on one device from one supplier. A multisig setup that requires signatures from wallets made by different manufacturers means a single compromised device cannot move funds on its own. Our step-by-step guide to setting up a 2-of-3 Bitcoin multisig walks through how this works.

If you already bought from an unofficial source

If your device came from a reseller you cannot verify, the cautious approach is to buy a new wallet directly from the manufacturer, generate a fresh recovery phrase on it, and move your funds to the new addresses. Ledger has given similar advice to buyers from the affected reseller. Moving funds costs a little in network fees, which is cheap insurance compared with the alternative.

The bottom line

Hardware wallets remain one of the best ways for individuals to secure crypto, but the security model starts before you open the box. Buy direct, generate your own seed, back it up on metal, and test everything with small amounts first.

This article is for informational purposes only and does not constitute financial advice.