The U.S. Attorney's Office for the District of Connecticut has successfully recovered and forfeited over $600,000 in cryptocurrency linked to a wire fraud and money laundering scheme. The case originated from a sophisticated phishing attack in September 2025, where a Connecticut resident received a physical letter falsely claiming to be from "Ledger Security & Compliance." The letter instructed the victim to perform a mandatory security check, which ultimately allowed fraudsters to compromise the hardware wallet and steal approximately $234,000 in cryptocurrency.
Following the theft, the FBI and Connecticut State Police traced the flow of funds through multiple wallets. This investigation led to the identification and seizure of roughly $600,000 worth of the stablecoin Tether (USDT). A civil forfeiture complaint was filed on October 21, 2025, alleging the funds were proceeds of wire fraud and money laundering. A warrant was granted in December 2025, and a federal judge formally entered the decree of forfeiture on March 30, 2026, transferring the assets to the government. No arrests have been announced in connection with the case.
The scheme is part of a broader trend of phishing campaigns targeting hardware wallet users, exploiting data breaches at manufacturers like Ledger and Trezor. These scams often use physical mail with company logos and QR codes to lend credibility and trigger a stronger safety reaction from victims. The recovered amount significantly exceeds the initial victim's loss, suggesting the seized wallets contained proceeds from additional victims or other illicit activity.
The case highlights the growing capability of U.S. law enforcement to trace and seize digital assets, even when laundered through multiple wallets. While the forfeiture is a civil action against the property, the criminal investigation remains open. The U.S. Attorney's Office plans to coordinate with the DOJ's asset-recovery officials to potentially return the cryptocurrency to victims.