Domain

<p>COLDCARD said on October 11 that its official X account had published a phishing message, directing users toward a fake wallet-migration site. The company said it found no corresponding login, session or access record, said its credentials and offline two-factor authentication remained secure, and asked X to investigate whether access could have occurred at the platform level.</p>
<h2 id="coldcard-reports-phishing-post-from-its-official-x-account">COLDCARD Reports Phishing Post From Its Official X Account</h2>
<p>In its public statement at 06:07 UTC, COLDCARD described a phishing message from the <a href="https://x.com/COLDCARDwallet" rel="noopener noreferrer nofollow">@COLDCARDwallet account</a> as unauthorised and identified the account as its official X presence.</p>
<p>COLDCARD said its review found no matching record of account access. It did not establish how the message was published; its request to X concerned possible platform-level access, not a confirmed explanation for the incident.</p>
<h2 id="fake-urgent-security-update-directed-users-to-a-migration-domain">Fake ‘Urgent Security Update’ Directed Users to a Migration Domain</h2>
<p><a href="https://inforex.com.br/trader/coldcard-tem-conta-no-x-invadida-em-ataque-de-phishing-contra-usuarios-de-bitcoin/" rel="noopener noreferrer nofollow">Inforex</a> reported that, at about 02:00 UTC on October 11, a message posing as an urgent security update directed users to migrate funds through migrate.coldcardwallet.io, a phishing destination.</p>
<h2 id="deleted-post-leaves-risk-of-confusion-over-migration-instructions">Deleted Post Leaves Risk of Confusion Over Migration Instructions</h2>
<p>The fraudulent post was later deleted, but COLDCARD warned that users could still confuse its fake migration instructions with an authentic security update, <a href="https://www.tokenpost.com/news/technology/29727" rel="noopener noreferrer nofollow">TokenPost reported</a>.</p>
<p>The supplied reports provided no information on user losses, view counts, or further distribution. The immediate verified concern was the <a href="https://cryptodaily.co.uk/glossary/protect-yourself-spot-and-recover-from-crypto-phishing-scams" rel="noopener noreferrer nofollow">deceptive instruction</a> and its potential to be mistaken for an official request from the wallet maker.</p>
<h2 id="x-asked-to-investigate-possible-platform-level-access">X Asked to Investigate Possible Platform-Level Access</h2>
<p>COLDCARD has asked X to investigate the incident, citing the lack of a matching login, session or access record in its review. Its statement said the company's credentials and offline 2FA were secure, while leaving the mechanism behind the account post unresolved.</p>
<p>For now, the company has not announced a timetable or outcome for X's investigation. The phishing domain and the deleted post remain the central identifiers of the incident disclosed on October 11.</p>
<p>Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.</p>

COLDCARD Warns Users After Its Official X Account Posts Phishing Link

Table of Contents

Crypto Daily™

Other articles published on Oct 11, 2026

Here’s Where XRP Price Could Go This Week (October 12-18)

Ledger-Related $92.9M Wallet Drain Across Bitcoin, Ethereum and TRON

Synergy Network Roadmap: Key Milestones and Future Plans

Cyber Capital Founder: Selling XRP to Retail As “Decentralized” Is Straight-up Fraud

Coinbase Card Without a Transaction Fee: What Investors Need to Know About Conversion and the Hol...

PYTH token buybacks are about to go nuts.

Join our free newsletter for daily crypto updates!