Ledger Nano S scam device from Ebay.

[angry_runner]

Today I received my Ledger Nano S from ebay. So guys from Latvia try to scam me with pre activated Nano S. He gives me fake cards with manual. The funny that they need send SMS to +33 753215393 with my device number and then I receive PIN and 24 seedphrase. I shot video with unpacking that device - https://youtu.be/rFrNC8p7akc . Only two cards instead of originals.
So my question what have I do? Is the new passphrase genereting (reset or reprogram) is enough in my case. If anybody needs I can screen and upload fake manual.
These guys from Latvia-Riga try to scam me.

[1714046855]

1714046855

[1714046855]

1714046855

[1714046855]

1714046855

[BitMaxz]

Just hard reset your ledger nano it would be enough and update your nano s to the latest version so that you are far from the hacker.

Then generate a new wallet and make sure to backup your own seed phrase and change your pin code.

I tried to search the contact number, but zero results on google I'd also search it on the official edger nano s website, but I couldn't find it.

Just don't follow the manual for your safety and I think you need to get the pin of your ledger nano to open it and perform the reset and make new wallet account.

[angry_runner]

thanks. I check it now and first time plug in sure enough it asks me a pin.
Not the welcome screen as written in official page.
https://support.ledgerwallet.com/hc/en-us/articles/360002481534-Is-my-Ledger-hardware-wallet-genuine-
so they advise enter 3 time wrong ping and reset the device follow this link
https://support.ledgerwallet.com/hc/en-us/articles/360000613793
it seems the same you told me. I put official links just in case someone have the same situation

[vlom]

thank you for posting the video.
why did you made a unboxing video? did you expect that something will be strange?

and its nice to see these scam attempts and not just read about them.

[angry_runner]

I made unbox because it is a new device for me. Just in case and for my youtube channel and for the memory:) also as a proof that I am a real person.
you can't believe but this is a real unbox, I noticed that it is wrong because read before about Ledger Nano S package from original site.

[Lucius]

Today I received my Ledger Nano S from ebay. So guys from Latvia try to scam me with pre activated Nano S. He gives me fake cards with manual. The funny that they need send SMS to +33 753215393 with my device number and then I receive PIN and 24 seedphrase. I shot video with unpacking that device - https://youtu.be/rFrNC8p7akc . Only two cards instead of originals.
So my question what have I do? Is the new passphrase genereting (reset or reprogram) is enough in my case. If anybody needs I can screen and upload fake manual.
These guys from Latvia-Riga try to scam me.

Why did you go to buy such a device from E-bay,when it has been repeatedly warned that only safe way is to buy only directly from the manufacturer?Did you want to make some kind of test to see what will happen or it is just ignorance?

I notice that even before you unpack Ledger,you were completely aware of what was happening and what is in the box,so how is that possible?

Regarding of using that device,I would not use it personally even though it can be reset to factory settings.There is suspicion that the seller has modified the hardware,in short let's say you threw money in the wind.

[angry_runner]

thanks for your attention comment.
it was risky bought from the beginning because it cost 50% of the retail price and it was described as a new.
I am really understand that device could be somehow pre activated or so.
Here the official site recommendation I follow:

"How to erase or reset your Ledger Nano S?

If you acquired a second-hand Ledger Nano S, or if you want to create a second wallet, follow this tutorial to learn how to reset your device first.

Warning: only wipe your Ledger Nano S if you are sure about what you are doing!

Connect your Ledger Nano S
Enter a wrong PIN code and validate by pressing both buttons
Repeat the 2nd step two more times
Once your Nano S displays the message "Your device has been reset", press both buttons until the "Welcome" message is displayed, or disconnect and reconnect your device.
Then you will be able to restore a wallet or create a new one."

So now I would like to make some experiments with that device. Just test some assumptions.

[HCP]

First, kudos for posting this up. If it saves just one person from losing coins it will have been worth it!

Given that the box has been opened (to insert the fake card) and the device has been "used" (already loaded with seed+PIN), you would be VERY wise to force an update of the bootloader and the firmware. This is the only way you can be sure that the firmware is an official firmware and not a compromised version that will generate "non random" seeds like the recent exploit.

Even after doing that, I'm not sure I would personally trust that device to store coins...

[angry_runner]

I am also would like to check security integrity of this wallet and shoot new video.
DIY link  - https://steemit.com/ledger/@cryptohblock/how-to-verify-the-security-integrity-of-a-ledger-nano-s-and-how-to-not-ruin-one-in-the-process
Original site link - https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-

[Lucius]

thanks for your attention comment.
it was risky bought from the beginning because it cost 50% of the retail price and it was described as a new.
I am really understand that device could be somehow pre activated or so.

You still have not answered how you know what is in the box before you opened it?It seems that the sound has not been added to the video after recording.So you open box,see what is inside and then decide to wrap the box again to make unboxing video?

In fact, it is very strange that someone decides to buy such a security-sensitive device from E-bay or Amazon when there are numerous documented examples of "fake" devices in the sense that seed is already generated.The basics of buying over the internet requests from the buyer to investigate all  possibilities of fraud.In this case this was 50% lower price and probably seller which has no positive feedback.

Only with using search engine you will get many results like this :

- 34000$ Lost/Fake Ledger
- FAKE Ledger Nano S unboxing
- Ledger Nano Ebay Scam

[angry_runner]

I shoot real unbox without my voice. Then write just a voice over.
Voice over was written after I read about scam Ledger Nano S packages. I does not repack this package again.
Most of this search results about pre activated device. 95% goes of the scam with pre activated device, where PIN and Seedphrases known to bad guy.
Chip modify potentially can be with probability about 1-2%.

[angry_runner]

so my case is not done. I check today does my device original or not and it is not pass that check!  https://youtu.be/hp5w6B9pDT0
"The Secure Element itself is personalized at factory with an attestation proving that it has been created by us. You can verify it by running

pip install --no-cache-dir ledgerblue

Then on firmware 1.3.1 or below

python -m ledgerblue.checkGenuine --targetId 0x31100002"
Original link here - https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-
So I do not want more even hope about that device and try to refund it via ebay.
Hope my lessons and videos help not to loose money with the faked -  Ledger Nano S.

[Lucius]

so my case is not done. I check today does my device original or not and it is not pass that check!  https://youtu.be/hp5w6B9pDT0
"The Secure Element itself is personalized at factory with an attestation proving that it has been created by us. You can verify it by running

pip install --no-cache-dir ledgerblue

Then on firmware 1.3.1 or below

python -m ledgerblue.checkGenuine --targetId 0x31100002"
Original link here - https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-
So I do not want more even hope about that device and try to refund it via ebay.
Hope my lessons and videos help not to loose money with the faked -  Ledger Nano S.

Don't USE Ledger Nano S until watch this video. Scam Alert. Part4. Not Genuine Device!

Title of your video is quite exaggerated,why should people stop using Ledger Nano S just because you bought fake one from E-bay?Hardware wallets are the safest way to store coins,although a lot of suspicions have emerged recently especially on the Ledger account.Nothing is 100% safe,so not even hardware wallet is not something you should blindly trust.

Your case just confirmed once more that buying hardware wallets from sites like E-bay,Amazon and similar are not safe,in most cases it is just too much risk for some discount-in the end it still is not worth it.

[motoprose]

so my case is not done. I check today does my device original or not and it is not pass that check!  https://youtu.be/hp5w6B9pDT0
"The Secure Element itself is personalized at factory with an attestation proving that it has been created by us. You can verify it by running

pip install --no-cache-dir ledgerblue

Then on firmware 1.3.1 or below

python -m ledgerblue.checkGenuine --targetId 0x31100002"
Original link here - https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-
So I do not want more even hope about that device and try to refund it via ebay.
Hope my lessons and videos help not to loose money with the faked -  Ledger Nano S.

Don't USE Ledger Nano S until watch this video. Scam Alert. Part4. Not Genuine Device!

Title of your video is quite exaggerated,why should people stop using Ledger Nano S just because you bought fake one from E-bay?Hardware wallets are the safest way to store coins,although a lot of suspicions have emerged recently especially on the Ledger account.Nothing is 100% safe,so not even hardware wallet is not something you should blindly trust.

Your case just confirmed once more that buying hardware wallets from sites like E-bay,Amazon and similar are not safe,in most cases it is just too much risk for some discount-in the end it still is not worth it.

Exactly. Why take the personal and financial risk in buying it from ebay and even marketplace sellers on amazon are looking to scam you. With all their filtered items by their security teams and buyer support can not protect people from buying knock-offs and tampered with items.
Buy the original item from France. There are so many reports and people sending screenshots of their nanos having fake packing then you clearly know it is not from the ledger company.

[angry_runner]

so my case is not done. I check today does my device original or not and it is not pass that check!  https://youtu.be/hp5w6B9pDT0
"The Secure Element itself is personalized at factory with an attestation proving that it has been created by us. You can verify it by running

pip install --no-cache-dir ledgerblue

Then on firmware 1.3.1 or below

python -m ledgerblue.checkGenuine --targetId 0x31100002"
Original link here - https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-
So I do not want more even hope about that device and try to refund it via ebay.
Hope my lessons and videos help not to loose money with the faked -  Ledger Nano S.

Don't USE Ledger Nano S until watch this video. Scam Alert. Part4. Not Genuine Device!

Title of your video is quite exaggerated,why should people stop using Ledger Nano S just because you bought fake one from E-bay?Hardware wallets are the safest way to store coins,although a lot of suspicions have emerged recently especially on the Ledger account.Nothing is 100% safe,so not even hardware wallet is not something you should blindly trust.

Your case just confirmed once more that buying hardware wallets from sites like E-bay,Amazon and similar are not safe,in most cases it is just too much risk for some discount-in the end it still is not worth it.

In this video I show how to check is your device genuine or not. Imagine if you bought and use device without genuine check? The page of this check in original site not from the first page. Yes my video prove that Ebay buys could be risky and it also show how you can check your device. Fro you point of view this video is simply because you have much exp. in a crypto fields. Many people are really dum with the crypto and with cold wallet. So my video just warn them. About title - if title been some boring long word - it could be not any attention of the people. What also do you like to ask me?

[HCP]

The question is... is the actual hardware in the device compromised? or is it just a fake firmware?

If you force an update and/or flash the official firmware... does it still give the non-genuine error?

[angry_runner]

I do not know about hardware  - just scary to open device physically.
probably to try new firmware today - mean I have now 1.3.1 will made actual 1.4.2 and re check device again.
 

[angry_runner]

I shot a new video with the firmware update till 1.4.2 and then passing the Genuine test. https://youtu.be/0LeLQVBk5oc
I found the answer that if you update firmware and your device does not pass the test. With the last firmware it pass it!
with the new firmware my device PASS GENUINE TEST!
Firmware update
https://support.ledgerwallet.com/hc/en-us/articles/360002731113
Genuine Test
https://support.ledgerwallet.com/hc/en-us/articles/115005321449-How-to-verify-the-security-integrity-of-my-Nano-S-
So I have only one test to pass - physical device opening and check the security chip - does the additional chip added or not.
I scary to do that, because this can break my device. If anyone donate me 0.01BTC - I open my Ledger Nano S and check the last test.

[HCP]

I'd be super-surprised if the physical device had actually been tampered with... As you say, the effort to do this without damaging the device is fairly substantial.

So it appears that the genuine test is only really testing that the firmware is all correctly signed and not tampered with in any way. Interesting that the old firmware that it had installed on it when it was shipped actually "failed" the genuine test. The scammers were obviously not using the method that Saleem Rashid had used to generate "hacked" firmware that fooled the attestation into believing it was real.

Also, what happened to Part 3 of your series?

[veleten]

ha,you want someone to sponsor you to open your device?
this is funny,if you are not sure -do not use it
I highly doubt anyone would go as far as installing an additional chip as it requires alot of technical knowledge and is not really worth the effort
think you are pretty safe using it,but I myself would never ever buy something sensitive like this from Ebay
you got your money's experience worth though+youtube channel content
maybe you can spend the money you get from ads revenue to buy another one soon ..from Ebay