Fake hardware wallet delivered with a pre-configured seed phrase

19 October 2026

A fake hardware wallet is a tampered or counterfeit device that arrives with a pre-configured seed phrase already set up, so that the scammer who prepared it can later drain any funds you send to the wallet. The seed phrase is the key giveaway: legitimate hardware wallets generate a fresh, random seed phrase on the device itself, during initial setup, and they never display one that was created elsewhere. If your new wallet comes with a written-down recovery phrase, or the device software asks you to "restore" from a phrase you were given in the box, you are almost certainly holding a scam in progress.

How the scam works

The scam relies on you trusting the packaging and the device's appearance more than you trust the underlying mechanics. Here is the typical sequence.

1. You order a hardware wallet - often from an online marketplace, a discount electronics retailer, or a seller on a peer-to-peer platform. The seller may offer a price noticeably below retail, or the listing may use official product photos and branding.

2. The device arrives in sealed packaging that looks convincing. The box may have a hologram sticker, a security seal, or a QR code pointing to a download page. None of this is proof of authenticity; counterfeiters replicate these details routinely.

3. Inside, you find the wallet, a USB cable, and a printed card with a 12- or 24-word seed phrase already written on it. Sometimes the phrase is on a sticker inside the box, or on a slip of paper tucked under the device.

4. The device screen may say "Setup Complete" or "Restore Existing Wallet" when you power it on. In some cases, the device is already paired with a mobile app, or the screen displays a wallet address that matches the printed card.

5. You set a PIN, then send cryptocurrency to the address shown. From your perspective, you are using a normal hardware wallet. In reality, the seed phrase was generated by the scammer before shipping. They kept a copy. When your funds arrive, they move them to a wallet they control.

The core deception is that the hardware wallet is not generating keys on the device - it is merely displaying keys that the scammer already knows. The device itself may be genuine hardware, or it may be a cheap clone running modified firmware. Either way, the security model is broken from the start.

Why It Works

Most people understand that a hardware wallet keeps private keys offline. What they do not always understand is that the seed phrase is the private key in human-readable form. Whoever holds that phrase controls the funds, regardless of where the device was purchased or how official it looks.

The scam also exploits a common habit: buyers often verify that the device powers on and displays a correct-looking interface, but they rarely check whether the seed phrase was generated on the device itself. A genuine hardware wallet will never, under any circumstance, ship with a pre-generated seed phrase. There is no legitimate reason for a manufacturer to do this. The device is designed to generate randomness on first use, and that randomness should be visible to no one except you.

How to Detect a Fake Before You Lose Money

You can protect yourself with a few checks. Some of these require doing nothing more than paying attention during setup.

• Inspect the packaging before opening. Genuine hardware wallets from major brands - Ledger, Trezor, KeepKey - have tamper-evident seals. But counterfeiters copy these seals. The seal is not proof; it is only a signal. If the seal is broken, do not use the device.

• Check whether the device is already set up. A brand-new hardware wallet should show a "Welcome" or "Setup" screen on first power-on. If it shows a wallet address, a balance, or a "Restore" option, stop. This is a red flag.

• Look at the seed phrase card. If the card has printed words, rather than blank spaces for you to write your own, the device is fake or tampered with. Legitimate wallets include blank cards, never pre-filled ones.

• Run through the setup process. During initial setup, the device should generate a seed phrase and display it on the device screen. You then write it down yourself. If the device prompts you to enter a phrase that came with the box, disconnect it immediately.

• Use the manufacturer's official app. Download the companion app (e.g., Ledger Live, Trezor Suite) only from the manufacturer's official website. Do not scan QR codes in the box. The app will often warn you if the device is not genuine, but this check is not foolproof for all clones.

• Test with a small amount first. After setup, send a tiny test transaction - the equivalent of a dollar or two - and confirm you can send it back out. This proves you control the seed phrase. If the test transaction fails or the funds vanish, you know immediately.

What to Do If You Already Used a Pre-Configured Wallet

If you have already sent funds to a wallet that came with a pre-printed seed phrase, assume the funds are gone. Do not send more money to "recover" them - that is a common follow-on scam. Move on to securing your other accounts.

If you have not yet funded the wallet, do not use it at all. Cut the card, discard the device, and buy a replacement directly from the manufacturer's official website. Yes, it costs more. Yes, it is worth it.

The Broader Pattern

This scam is one variant of a family of attacks that involve seed phrase exposure. It overlaps with seed phrase solicitation scams, where someone contacts you pretending to be support and asks for your phrase. The difference here is that the attack happens before you own the device, so your guard is down. The principle is the same: a seed phrase that was created outside your control is not your seed phrase.

If you are buying a hardware wallet second-hand, the same rule applies. Even if the device appears unused, you have no way to know whether the seller kept a copy of the seed phrase. Always reset the device and generate a fresh seed phrase. If the device does not allow a full reset, do not use it.

A genuine hardware wallet is a tool for keeping your private keys offline. The moment you accept a pre-configured key, you have thrown that protection away. The only safe seed phrase is the one you generated yourself, on a device you trust, in a room where no one else is watching.

Back to crypto scams