Connecticut Authorities Seize $600,000 in Tether from Phishing Scam
We have always followed the principles of transparency and clear information. Some of our content includes affiliate links, and we may earn a small commission through these partnerships. These partnerships do not influence our editorial independence or opinion. By using our site, you accept our privacy policy and terms and conditions.
Financial services expert with over three years of experience monitoring cryptocurrency markets and blockchain innovation. Passionate about digital assets and the decentralized future.
Cryptocurrency is a high-risk asset class, and investing carries significant risk, including the potential loss of some or all of your investment. The information on this website is provided for informational and educational purposes only and does not constitute financial, investment, or gambling advice. Cryptowinx does not endorse any specific exchange or gaming platform. For more details, please read our terms and full disclaimer.
Cryptowinx navigates the digital asset universe with a dynamic, forward-looking vision. Throughout our evolution, we have followed every market cycle, from vertical rises to corrections, always remaining a solid point of reference for our community. Our team is made up of industry experts and analysts who experience the blockchain ecosystem daily: we constantly monitor Bitcoin’s stability, study the expansion of the Ethereum ecosystem, and analyze the new frontiers of crypto casinos. We are committed to absolute editorial integrity, separating the signal from the noise through rigorous fact-checking and multi-perspective news analysis. In a landscape where innovations emerge in moments, our mission is to simplify complex concepts and offer transparency into what is established and what is still experimental.
Learn more Cryptowinx
The U.S. Attorney’s Office in Connecticut has successfully reclaimed over $600,000 in Tether (USDT), stemming from a sophisticated phishing scheme that misled a hardware wallet user through a deceptive letter.
This operation involved the collaborative efforts of the FBI’s New Haven Division and the Connecticut State Police, who filed a civil forfeiture complaint in early January 2026 against the funds. On March 31, 2026, the U.S. District Court authorized the forfeiture, transferring the seized cryptocurrency to federal control.
The individual affected, referred to only as T.M. in court documents, fell victim to the phishing attempt after receiving an unsolicited letter in September 2025. The correspondence, which appeared to be from “Ledger Security and Compliance,” requested T.M. to complete a security review of their Ledger wallet.
After adhering to the instructions provided in the letter, T.M. unknowingly relinquished their wallet’s recovery seed phrase, granting scammers access to their funds. Law enforcement utilized blockchain analytics to meticulously trace the stolen cryptocurrency. The scammers had obscured their trail by channeling the funds through various intermediary wallets before converting them into USDT, a stablecoin aligned with the U.S. dollar.
The transparency of blockchain records enabled investigators to track the illicit transactions and locate over $600,000 in stolen assets. The civil forfeiture complaint, designated as case 3:26-cv-28 in the District of Connecticut, asserted that the holdings were proceeds from wire fraud linked to money laundering activities.
Through civil forfeiture, authorities bypassed the need to identify or charge the perpetrators, believed to be situated abroad. Interim U.S. Attorney David X. Sullivan emphasized that those involved in criminal activities should not expect to retain their ill-gotten gains. FBI Special Agent in Charge P.J. O’Brien commended the joint efforts of federal and state agencies in tracing and securing the funds.
The recovered USDT will be returned to T.M. via the Department of Justice’s asset management procedures, monitored by the Money Laundering and Asset Recovery Section. This method of phishing through physical mail has targeted Ledger users since at least 2021.
Scammers had leveraged details from a breach of Ledger’s customer database back in 2020 to craft convincing letters, instructing victims to reveal their 24-word recovery phrases on fraudulent websites or through QR codes leading to malicious pages.
Ledger has consistently cautioned its users against unsolicited communications requesting security details, asserting that any such correspondence is fraudulent.
This incident highlights the increasing efficacy of federal agencies in deploying blockchain analytics to recover assets lost through cryptocurrency scams. Tether’s prompt cooperation in freezing and reallocating the seized USDT to government-controlled wallets significantly aided the recovery process.
Leave the reaction
Gregory Russell
Commentaries
Add your comment
Fill in necessary fields and publish