Be prepared

[5W-KILO]

Stand your ground pips, a new wave of scam emails incoming.
Since keystone data got breached many people's information already got leaked, there is no coming back from that one.

Your email address will likely start receiving messages well constructed in a way that the keystone Devs will want to safe your ass from getting hacked, scammed or losing your coins.

Do not fall for it.



I don't know how you all fill your forms but Its possible that you will receive calls too, just be prepared and make sure you don't give in for any excuses, no matter how genuine it sound to the ear it's all a scheme, keystone team or dev have no right to contact you for anything.

https://x.com/Cointelegraph/status/2114130034633916432

Stay unscammed 

[Japinat]

They will use every piece of information that was leaked to scam people.

So the most possible ways they will do this are

- phishing emails
- phone calls
- fake security instructions

So being aware of this is not enough, we also have to secure ourselves and understand how to prevent scammers from taking advantage of us.
Thanks for preparing us OP so we don't fall victim to these scams.

We will stay "unscammed" 

[Hypnosis00]

Reporting suspicious emails is simple to do. Besides, I'd never answer calls nor reply to messages from anonymous senders. This won't make you feel alarmed. We can ignore them. So scammers do nothing for me.

What should Keystone users do?
1. Never disclose your 12- or 24-word recovery phrase.
2. Ignore unexpected emails offering wallet replacements, refunds or security updates.
3. Report suspicious Gmail messages using Report phishing.
4. Forward phishing emails to reportphishing@apwg.org.
5. Verify suspicious messages through Keystone's official website.

Despite the breach. The good thing is that the Keystone hardware wallet is not hacked. But exposed customer information could help criminals target wallet owners. This will lead to receiving unsolicited emails.

The situation isn't worth worrying about. As long as we never share wallet information and send money to strangers wallet addresses, it will still be fine.

[Hypnotizer]

Saw some home addresses were also part of what got leaked..

For people that ordered the keystone wallet  and they suspect their home address might be leak and they live in countries where wrench attacks are kinda common like France, it’d probably be better if they change their location and move to a more safer place or better still improve the security of their home to prepare for any possible attacks especially if their stash is big..

Phishing emails are going to be the most common after this leak, but that doesn’t rule out the possibility of Wrench attacks.

So be prepared for that also.. and Stay safe.

[Ziskinberg]

Though we might not easily fall victim to these scam attempts since we are already well informed here, the same cannot be said for others who may not be aware of these risks.

And the numbers speak for themselves.

According to the 2025 IC3 Report, there were 191,561 complaints related to phishing/spoofing in 2025.

[Lembo69]

We have to be very careful to keep our Bitcoin wallet safe and safe from every information they leak. In that case, we have to take care that our seedphrase information does not reach them in any way. If you see suspicious activity, you have to take quick action. No information can be given to anyone and no wrong action can be taken from any link. Those who scam in Bitcoin are always on the lookout to get information from you in some way or the other, be it a phone call or an email, they can try to trap you in any way, so you have to be very careful. Whenever you get free time, check your wallet. Do whatever you can to keep your wallet in your custody.

[KiaKia]

Until one crypto wallet or hardware wallet company is used as a scapegoat they will not listen, what is their reason for keeping people's data after they have received the devices successfully? 

Until the law put penalties on one company others won't take it seriously, coming from the one hardware wallet that I like the most simply because it's fully airgapped I am disappointed in them for sure.

They always talk like they understand what's going on in this crypto space, it's sure they know better than the rest like they claimed, they need to pay for their own carelessness, argh I wish.

[DPHOR]

Thank you for sharing here.
Again, does it mean that only those who are using keystone that would receive the scam mail or what?
Because as I know, those who are not using wallet that doesn't associated with any mail will never receive any scam mail. Of course, we know as things works nowadays since scammers are putting much efforts to scam people around we should all be at alert in regards to the scheme.

[Call_Me_Guru]

Those who we entrusted our data to have failed us. No sorry, no compensation, no nothing, yet they expect us to continue supplying our details and calls it regulation demand. I Am Going More Solo.

BTW: Those who still give out their sensitive details this age, I feel sorry for you. It's Keystone now, It could be another.

[justinlamode]

Stand your ground pips, a new wave of scam emails incoming.
Since keystone data got breached many people's information already got leaked, there is no coming back from that one.

Your email address will likely start receiving messages well constructed in a way that the keystone Devs will want to safe your ass from getting hacked, scammed or losing your coins.

The best preparation anyone can make now is to transfer their Bitcoin to another wallet to avoid learning from experience. If the hackers got access to sensitive information already, then there are just so many things they can do with such information that ought to keep anyone worried.

If Keystone confirms that seed phrases were not touched, I will take that with a pinch of salt because that is even the primary target of the hackers. There are far too many incidents of recent and this one too is a disaster waiting to happen, so preventive actions are necessary.

[fighter2627]

They will use every piece of information that was leaked to scam people.

So the most possible ways they will do this are

- phishing emails
- phone calls
- fake security instructions

So being aware of this is not enough, we also have to secure ourselves and understand how to prevent scammers from taking advantage of us.
Thanks for preparing us OP so we don't fall victim to these scams.

We will stay "unscammed" 

I agree with what you mentioned in this post and I support them, that's why here in our country when someone calls me from an unknown number I don't really answer unless
they text first and introduce themselves, then I'll answer the call.

But I don't really answer due to hackers these days are indiscriminate and waste opportunities to victimize people.

[Rashlyowl]

Bad news, as usual for this year.

Hacks of CEX funds & the latest one is the compromise of a hardware wallet brand. This particular issue wouldn't be a problem at all if it weren't for human error. Therefore, please exercise caution when responding to any incoming messages, calls, or emails.

By the way, thanks for sharing this information bros @5W-KILO.

[Ryu_Ar1]

The bastards are always looking for ways to take advantage of the situation and we must be prepared not to be too careless to believe some bullshit that will serve to deceive.

Vigilance is indeed very important for now because we could have also been monitored from the beginning especially when information leaks occur.
It is certain that Private Keys or seeds are safe from leaks but for names, phone numbers and addresses are rumored to be leaked so this is the gap for them to explore something.
There will always be bad people who use this as momentum but on the one hand it will not apply if we are still vigilant and do not trust anyone too much for now because it could make us careless.

[Chibit01]

The situation isn't worth worrying about. As long as we never share wallet information and send money to strangers wallet addresses, it will still be fine.

You don't see it as a big deal because you are already aware of how this scam works and some just seeing the name and logo of their wallet developers in part of the email they receive can send a strong and convincing signal to them without being warned they could fall victim to the scam.

Another danger, when you are too focused on not just giving your seed phrase to a third-party, as the target clicking on the link sent to the email can get your device compromised. It's better if we fully avoid even trying to open the email sent to see its content.

[Oshio-man]

Well, things like this will definitely happen to some cryptocurrency users for them to learn more and never not to allow other users to fall victim to scammers because scammers don't mean well to bitcoiners and anyone that will be scamm, it will take them some years before they can recover, and it will make them to avoid bitcoin investment or bitcointalk forum, I think a lot will learn from this thread because is not a good wish of any bitcoiners to involve in the hands of scammers.

[decodx]

It honestly feels like self-custody is under an onslaught of attack from all sides. Coldcard firmware bug compromised millions of keys, Crypto Bilis reseller attack delivering thousands of tampered Ledgers, Trezor and now the Keystone customer shipping information data sold on the dark web…

I don't like wild conspiracy theories, or even think it's some grand, coordinated master plan by governments to destroy hardware wallets, and in doing so, cripple self-custody as a whole... But honestly, with how bad things have been lately, you kinda have to wonder... is it really that far-fetched?

[atookz]

Stand your ground pips, a new wave of scam emails incoming.
Since keystone data got breached many people's information already got leaked, there is no coming back from that one.

Your email address will likely start receiving messages well constructed in a way that the keystone Devs will want to safe your ass from getting hacked, scammed or losing your coins.

Thanks for the heads up mate. Interesting how hardware wallet companies keep running into this. In 2020 and early this year, customer data was leaked from Ledger via a third-party vendor, and from Trezor via a shipping provider, their names, phone numbers and home addresses were exposed. Seems like it's typically the order data in the hands of the vendor that's weak not the wallet.

If the seed is not removed from the device, the money will not be at risk, but the owner will be. Some Trezor customers even received phone calls from individuals who spoke as if they knew them personally, which means that the fact that someone calls you by your name doesn’t necessarily mean they know you. All you need to do is to simply hang up and type in the official site address yourself.

I'm also not sure of the size of the Keystone leak, so I would wait for a statement from them.

[JoyceBTC]

Though we might not easily fall victim to these scam attempts since we are already well informed here, the same cannot be said for others who may not be aware of these risks.

You cannot be too sure, even after creating awareness here, some persons might still fall victim and dropping this information here does not also mean everyone here on the forum has seen this and is aware. Thank you to OP for creating awareness and calling the attention of other members here about this. It now left for we all to be security conscious and avoid been trapped as victims, no matter how accurate they will be with our informations, please don’t fall prey and let’s still keep creating more awareness about this.

[Filicius]

Until one crypto wallet or hardware wallet company is used as a scapegoat they will not listen, what is their reason for keeping people's data after they have received the devices successfully? 

Perhaps to ensure the validity of the warranty or to ensure after-sales service. The customer will probably have also ticked the data protection boxes to receive news, newsletters, and commercial information about future products or services offered by the company.

While it seems that they should take better care of the data of a type of customer who could be attributed a special sensitivity in how their data is used, the reality nevertheless shows that many crypto wallet or hardware wallet companies still act like almost any other company, where data equals money and must be kept and exploited.

[Faisal2202]

For people that ordered the keystone wallet  and they suspect their home address might be leak and they live in countries where wrench attacks are kinda common like France, it’d probably be better if they change their location and move to a more safer place or better still improve the security of their home to prepare for any possible attacks especially if their stash is big..

No, not every Keystone owner is rich. They can't just leave their house or leave the country. They might stay somewhere else for the time being, but there is no deadline, so how long do they have to stay away?

They only have one option, to sell the house or, if renting, change the place and move out. This has already happened to a person in France, I think, and the other person who bought the place was wrench attacked at least twice, got nothing, and was caught. The first time, I think a dog prevented it.

So the new owners of the house have to face the attack because the old owner was a Bitcoiner and his data was leaked.

https://news.bitcoin.com/crypto-news/french-couple-moves-to-sell-home-after-3-crypto-linked-invasions/