Fake Ledger site hosted on Google Sites drew over a million visits

On October 9, 2026, security researcher Cyber Scrilla flagged a counterfeit Ledger website and app that ranked high in Google search results and prompted users for their seed phrase.

The page, built on Google’s free Sites service, logged more than one million visits in the past 30 days and remained live at the time of reporting.

The discovery coincided with Ledger’s probe into an $86–93 million theft from customers who bought devices through Southeast Asian reseller CryptoBilis. The company stressed it never asks for recovery phrases and said the fake domain has been handed to its team.

Similar scams have hit the brand before, including malicious Google ads documented by Zscaler in September 2026 and a fake Ledger Live app removed by Apple in April that caused at least $9.5 million in losses.

Based on information from cryptonews.net