COLDCARD investigates X phishing link to fake recovery page, reports no matching login records
COLDCARD said it is investigating how a phishing link appeared in a post on its official X account. The post was deleted, and the company advised users not to visit or interact with the link [1] [2].
The link led to a fake wallet security or migration page. A researcher found the site was designed to collect wallet recovery phrases [3] [1].
COLDCARD said it found no matching login record; a separate report said the company found no login, session or access records and had used offline two-factor authentication on the account since 2017 [3] [4].
Anonymous feedback used to improve internal story ranking. No public totals are shown.
Share
Share this article
Share this article on social platforms.
Support ClusterWire
If you find ClusterWire useful, tips help cover hosting and infrastructure costs.
We record anonymous interactions with tip buttons to understand feature usage. We do not include IP addresses, user-agent strings, or wallet addresses in these tip analytics. Blockchain transactions are public and may reveal the sending address.
Sources
Review the sources used to produce this brief. Citations open the referenced material in a new tab.
- 1COLDCARD warns Bitcoin users about phishing scam on Xcrypto.news• Oct 11, 2026
- 2Coldcard says it’s investigating how phishing link appeared on its X accountCointelegraph• Oct 11, 2026
- 3COLDCARD Warns of Phishing Post on Its Official X AccountThe Defiant• Oct 11, 2026
- 4COLDCARD X Account Compromised in Phishing Attack Despite Offline 2FAPhemex• Oct 11, 2026
Updates and corrections
No changes recorded in the new revision log. Earlier edits may not be included.
Topics
Related Topics
Topics identified from the sources associated with this article.