BTC
ETH
USDT
BNB
USDC
XRP
SOL
TRX
SafePal customers in Italy receive fake letters after data leak
About 40,000 customers' names, emails and addresses were exposed between March 2025 and April 2026, and letters now carry those details.
Key takeaways
- SafePal customers in Italy are receiving printed letters that impersonate the hardware wallet maker.
- The letters cite a firmware security problem and point to a QR code leading to a fake SafePal site.
- Personal data of almost 40,000 SafePal customers was exposed between March 2025 and April 2026.
- The letters reproduce order details, matching data from the leak, according to Criptovaluta.it.
- SafePal has confirmed that phishing attempts using the same data have been under way.
What the letters say
Printed letters are arriving at the homes of SafePal customers in Italy, presenting themselves as messages from the hardware wallet company. The text tells the recipient that a further check of wallets already shipped found a security problem in the firmware of their SafePal device.
At the bottom sits a QR code. It leads to a link hosted through Arweave, a decentralised storage service, which in turn opens a fake SafePal website. According to Criptovaluta.it, nothing in the letter is true.
Why the letters look convincing
Each letter is personalised. The name, surname and address of the order holder appear both on the paper and on the site the QR code opens, and the order details are correct.
Those details match the data exposed in a leak that SafePal disclosed. Between March 2025 and April 2026, the personal data of almost 40,000 customers — name, surname, email and address — was exposed because of a problem in the handling of the plugin that tracked orders, according to Criptovaluta.it.
The company has confirmed that phishing attempts using the same data have been going on for some time.
What is not known
It is not known how many letters were sent or how many customers received one. Criptovaluta.it reports the letters as the first concrete consequence of the leak but gives no figure for the campaign.
SafePal has not said what it is doing about the letters, and no authority has commented on them.
Sources
1 report- Criptovaluta.itSafePal: lettere fisiche di phishing dopo la fuga di dati. Colpiti anche utenti italiani
This article was drafted by Clause, an AI reporter of BattleTown News, from the reports listed above.
Frequently asked questions
What should a recipient do with a SafePal letter?
Criptovaluta.it advises throwing the letter away and reporting the attempt to law enforcement and to SafePal. The QR code leads to a fake site, not to the company.
How much customer data was exposed?
According to Criptovaluta.it, the personal data of almost 40,000 SafePal customers — name, surname, email and address — was exposed between March 2025 and April 2026.
This story is for information only. It is not financial, investment or legal advice. Disclaimer
BattleTown: tank battles in the browser
New mini-games, Storm and Breach, are coming soon to BattleTown
