Is My Hardware Wallet Genuine? How to Check for Tampering

You cannot prove a hardware wallet is untampered with one test. You build confidence from several: buy through the maker or a listed reseller, inspect the packaging, let the official app run the device's cryptographic authenticity check, and generate a brand-new recovery phrase on the device yourself. If the box contains a phrase or PIN you did not create, do not use it.

That layered answer matters more after October 2026. Ledger's own security team states that its Genuine Check cannot detect spying implants if the original secure element is intact, and our news desk covered a case in which a genuine device sold through a listed reseller carried exactly that kind of added hardware. A passing check is real evidence, not the whole story.

This guide covers the moment after purchase, whether the box is unopened or the device is already set up. It is built from the makers' own documentation (Ledger, Trezor, Coinkite for Coldcard, and Foundation for Passport), read on October 22, 2026, and it does not rank or recommend any device. If you are still choosing one, our separate guide on how to choose a hardware wallet covers the pre-purchase criteria. If the idea of a wallet that holds keys rather than coins is still new, start with what a crypto wallet actually stores.

Four Different Ways a Device Can Be Bad

"Fake" is too blunt a word, because each attack needs a different test. Ledger's buying guide names separate categories, and the split works for any brand.

Threat	What it is	What the attacker wants	What tends to catch it
Counterfeit	A replica built to look like the real product, often with the same branding, weight and box	Control of the seed from the start, either by rigging seed generation or by copying the seed out	Cryptographic authenticity check run with official software
Tampered genuine device	A real device whose hardware was modified after it left the factory	To read what the screen shows, especially the recovery phrase at setup	Purchase channel and physical evidence; the cryptographic check may pass
Pre-seeded device or kit	A device or backup card that arrives with a recovery phrase or PIN already chosen	To keep a copy of the phrase and drain the wallet once you fund it	Refusing any phrase or PIN you did not create on the device
Unsolicited "replacement"	A device you never ordered, mailed with an urgent letter	To get you to plug it in and type your existing phrase into it or into a companion app	Never using hardware you did not buy

The second row is the uncomfortable one. Ledger defines a tampered device as a genuine signer modified after leaving the factory, and says the attacker's goal is generally to get you to use it so they can remotely exfiltrate what is displayed on the screen. That is why the rest of this guide treats the purchase channel and your own seed generation as security controls, not as shopping advice.

NIST's supply chain risk guidance (SP 800-161 Rev. 1) frames the same worry for organisations: products that may be counterfeit or contain malicious functionality, bought with limited visibility into how they were built and handled. A wallet buyer faces that problem at a smaller scale, relying on evidence about who handled the device and on checks it can perform for itself.

What Each Check Proves, and What It Cannot

This table is the heart of the guide. Every check is worth doing. None of them is enough alone, and knowing the blind spot of each one is what stops a passing result from turning into false comfort.

Check	What a pass tells you	What a pass does not tell you	Example from maker documentation
Bought from the maker or a listed reseller	The unit came through a channel the maker audits and contracts with	That nobody inside that channel interfered with it	Ledger publishes a list of authorised resellers and says its agreements forbid them from restocking and reselling returned devices
Intact seal and packaging	Nobody opened the package in a crude way	That nobody opened it carefully, or that the seal is not a copy	Ledger's security team calls holographic seals trivial to clone; Coinkite says bags can be defeated with sharp knives or a heat press
Serial or bag number matches	The bag or box is the one the maker recorded	Anything about the electronics inside	Coinkite records each Coldcard's bag number in the device's secure flash at the factory
Firmware signature check	The code the device runs was signed by the maker	That the physical hardware around the chip is unmodified	Trezor's bootloader checks the firmware signature at each connection; Passport Core installs only firmware signed by 2 of 4 Foundation developer keys
Cryptographic authenticity check (attestation)	The secure chip holds a key the maker installed at the factory, so the core is not a replica	That no extra component was added to the device	Ledger states its Genuine Check cannot detect spying implants if the original secure element remains intact
You generated the seed on the device	No outsider chose your phrase	That nothing watched the screen while it was shown	Ledger and Trezor both say a genuine device never arrives with a phrase already filled in

Attestation answers "is this the maker's chip?" Seed generation on the device answers "did someone else choose my phrase?" Neither answers "did someone add a component that can see the screen?" Only the purchase channel and physical evidence speak to that, and both are weaker proof. That gap is the honest limit of consumer verification today.

Step 1: Check the Purchase Channel Before You Open Anything

The cheapest check happens before the box arrives, and it is the one that covers the threat attestation misses. Ledger's own guidance puts it plainly: the Genuine Check confirms authenticity, but it cannot verify the device's physical supply chain history, which is why it recommends buying directly or from an authorised reseller.

Four questions settle this step:

1.Who actually sold it? On a marketplace, several sellers can sit behind one product page. Ledger advises checking the "Sold by" name and cross-referencing it against its official reseller list. A brand storefront on a marketplace and a third-party seller on the same listing are not the same channel.

2.Was it new and sealed from that seller? Ledger says its reseller agreements contractually forbid restocking and reselling returned devices. A unit described as "open box", "returned" or "like new" has, by definition, been out of the controlled chain.

3.Did you order it? Ledger says legitimate replacements are never sent unsolicited. It describes a May 2021 case in which a user received a "replacement" in official-looking packaging with a letter urging immediate migration; the device hid a soldered flash drive carrying malware, and about $78,000 was drained within 30 minutes of the user entering their phrase into the malicious app. Hardware you did not order should not be plugged in.

4.Was it a gift or second-hand? Treat any device that passed through another person's hands as unknown history. The maker's checks still help, but the channel evidence is gone.

An authorised channel is a strong signal, not a guarantee. Ledger itself writes that no global supply chain is entirely immune to sophisticated interception or tampering. The October 2026 case below happened inside a listed reseller.

Step 2: Inspect the Packaging, Knowing What Seals Can and Cannot Do

Seals are designed to make careless tampering visible. They are not designed to stop a patient attacker, and the makers say so. Ledger's security team calls classic anti-tampering and holographic seals a source of "a false sense of security", because they are easy to clone and a package can be opened and closed without damaging them. Coinkite calls its own tamper-evident bag "merely one of many layers of security" and notes that plastic bags can be beaten with sharp knives or a heat press.

So inspect with a clear goal: you are looking for reasons to stop, not for proof that all is well. Here is what the makers ask buyers to look for, as examples of the kind of detail each brand publishes for its own packaging:

Trezor Safe 3: a holographic seal over the USB-C connector that is clean, firmly attached and free of tears or residue. Peeling it leaves a "VOID" residue, which Trezor says is normal. Devices made from April 2024 carry an updated seal design, and Trezor says both designs are genuine. It also notes that a slightly rough edge on the case is an injection-moulding point, not a sign of tampering.

Coldcard: a sealed bag with a barcode and a number underneath, which Coinkite calls the "bag number". The factory records that number in secure flash inside the device. Pulling the top seal apart shows the word "VOID". For the current bag design, a serialised tear-off tab is included inside so you can check the bag's width and match the perforations, and the bottom of the bag should have no seam. Coinkite says it no longer uses its older green and red bag designs.

Foundation Passport Core: a blue security seal on the outer box with a unique alphanumeric code. Foundation says it keeps only the first characters of these codes, which identify the production batch, and publishes the list of valid prefixes. Removing the seal leaves "Void" and "Opened" residue, and Foundation suggests cutting through it rather than peeling it.

Ledger: if a package from any authorised reseller appears opened, altered or compromised, Ledger says not to use the device and to contact support.

Photograph the box, the seal and any number before opening, and compare what you see with the maker's setup page for your exact model rather than a forum photo, since seal designs change. Opening the case itself is another matter: Ledger points confident owners to an inspection tutorial but warns them not to damage the device. For most people, a suspicious package is better handled by contacting the maker than by a screwdriver.

Step 3: First Power-On, Firmware and the Authenticity Check

The device's own checks are where a counterfeit is most likely to be caught, provided you run them with software from the maker's website or the official app stores. That last condition is critical: Ledger warns that counterfeit devices often ship with modified versions of its companion app that "happily report genuine" for fake hardware.

Firmware state on arrival

Some devices are designed to arrive without firmware. Trezor says the Safe 3 leaves the factory with no firmware installed, and that Trezor Suite guides you to install the latest signed version during setup. If your model's documentation says it ships empty, a device that arrives already loaded is a reason to pause and ask the maker. Do not apply that rule to other models without reading their own setup page, because practices differ by device.

Coldcard's quick-start guide adds a step few buyers think of: before choosing "New Seed Words", check the maker's security status page, install a fixed firmware release for your model, and verify the signed download (Coinkite's upgrade guide checks the OpenPGP signature on the "signatures.txt" manifest and compares its SHA-256 hash with one you compute). Coinkite also states that updating firmware does not repair an existing affected seed.

The cryptographic authenticity check

Every major maker now uses some version of challenge and response. The idea is the same across brands:

1.At the factory, the device's secure chip receives a key and a certificate or signed public key from the maker.

2.When you connect, the official software sends a random challenge.

3.The chip signs the challenge with its private key, which never leaves the chip.

4.The software checks that signature against the maker's public keys.

Ledger's description is the most detailed public account. Each secure element generates a unique key pair at manufacturing, Ledger's server signs the public key with the company's root of trust, and that signed key becomes the device's attestation. The check runs when you first connect the device to Ledger's app, each time you open the app, when you install an app on the device, and on every firmware update. A failed check means the app will not interact further with the device.

Trezor says each Safe device receives a unique certificate on the production line, stored in its secure element, and Trezor Suite runs the check after firmware installation. On the Safe 7, two secure elements take part and, since a May 2026 update, the microcontroller adds a post-quantum ML-DSA-44 signature. Trezor lets users turn the check off but says to do so only for unofficial devices such as DIY builds. Older models rely on a firmware revision check against a database of legitimate revision IDs plus a firmware hash check at each connection.

Foundation says Passport Core stores a supply chain private key in its secure element, which enables a "Supply Chain Validation" step during setup, and that a failure means the device may have been tampered with or swapped before it reached you. A manual version of the validation exists for people who set up without Foundation's Envoy app.

The common rule across all of them: if the authenticity check fails on a new device, stop. Do not create a wallet, do not "try again later" with funds on it, and contact the maker through its official site.

Step 4: Generate the Recovery Phrase on the Device, on a Blank Card

This is the step that defeats pre-seeding, and it costs nothing. Ledger states that a legitimate device never comes with a recovery phrase or PIN pre-configured. If one arrives written on a card, printed in the instructions, or shown at any point before you complete setup, Ledger says not to use it, not to enter it, not to send crypto to its addresses, and not to use the device at all, since the package has evidently been tampered with. Trezor gives matching guidance: its wallet backup cards should be completely empty, and if words are already written or printed on them, do not use the device.

Check these points during setup:

Choose "create new wallet", never "restore", for a fresh device. Restoring imports a phrase that already exists somewhere else. If the device or a leaflet pushes you toward restoring a phrase that came in the box, stop.

The phrase appears on the device's own screen. Not on your computer, not on a phone, not on a website. Ledger says a genuine device never asks you to type your recovery phrase into a computer, phone, app or website.

You write it on a blank card or your own medium. Our recovery seed backup checklist covers how to record and store it once it exists.

The device makes you confirm it. Coldcard, for example, quizzes you on the words in random order before saving them. Treat any confirmation step as a check on your handwriting, not on the device's honesty.

Some devices let you add your own randomness. Coldcard combines its internal randomness with input you provide, such as at least 50 dice rolls or 128 coin flips, and Passport Core allows user-added entropy. That reduces reliance on the device's random number generator. It does not stop hardware that reads the screen, because the finished phrase is still displayed. Be clear about which threat each habit addresses.

Coldcard and Passport Core also offer anti-tampering cues you set yourself. On a Coldcard, the first part of your PIN produces "anti-phishing words" unique to that device, and Coinkite tells owners to verify them before entering the second part, every time. Passport Core has an optional "Security Words" feature that Foundation describes as an extra layer against device tampering. If a swapped or altered device shows different words, you learn that before giving it your full PIN.

Step 5: First-Use Tests Before Real Money Goes In

A device that passed every check still deserves a short probation period. These tests confirm your backup works and limit what you can lose if something was missed.

1.Send a small test amount first. Move a small sum, confirm it arrived, then move the rest. Our guide to moving coins from an exchange into your own wallet walks through the test transaction and network checks.

2.Verify the receiving address on the device screen. The address on your computer can be altered by malware; the one on the device screen is the one the device will control. Compare them character by character.

3.Confirm your backup is readable. Most makers provide a backup check in their app or device menu. Use it while the wallet is nearly empty.

4.Re-inspect on each use. Coinkite's checklist for each time a Coldcard comes out of storage is a good habit for any brand: are there scratches on the case, is the status light green, are the anti-phishing words correct?

5.Keep connecting only through official software. Ledger's check repeats on app launches and firmware updates, and Trezor's firmware hash check runs on each connection, so a later failure is still a signal.

If the wallet will interact with smart contracts, remember that a genuine device does not stop you from signing a harmful approval. That is a separate risk, covered in our guide to revoking token approvals that wallet drainers rely on.

The October 2026 Reseller Case: What It Shows About the Limits

Our news desk tracked a case that maps almost exactly onto the gap in the table above. On October 9, Ledger said it was investigating reports of lost funds from Southeast Asian buyers of devices sold by CryptoBilis, a reseller listed as authorised in Indonesia, Malaysia and the Philippines. It asked the reseller to pause sales, told buyers from the previous 90 days not to set up unused devices, and told those who had already set one up to consider moving funds to a new signer with a newly generated phrase (our October 10 report on the reseller investigation).

Two days later the company confirmed that one affected device contained an unauthorized hardware implant (coverage of the confirmed implant). On October 13, according to the reporting our desk summarised, Ledger said the component sat inside the enclosure, decoded the 24-word phrase as the screen displayed it at setup, and transmitted it over a cellular connection, without modifying the secure element, the operating system or any signed transaction (how the implant worked, per the company). Loss estimates in that coverage come from outside researchers, not from the company.

Read against the checks in this guide, the lessons are specific:

Attestation may not catch it. Ledger's documentation says its genuine check verifies the secure element, so an added component elsewhere on the board would not necessarily fail it. That is our reading of the documented limit, not a reported test of the devices in this case.

Seed generation on the device did not help, because the phrase was legitimately generated and then observed.

The purchase channel was the control that failed, which is why the response focused on the reseller and on prohibiting restocking of returns.

The fix was new keys, not new firmware. A phrase that has been seen is exposed wherever it is restored.

The same weekend, Coldcard investigated a phishing post published from its official X account that claimed a seed-generation flaw and pushed a fake "security migration" site (our report on the Coldcard account incident). It is a reminder that the next attack on a hardware wallet owner may arrive as an urgent instruction, not as a device. No maker's real fix asks you to type your phrase into a website.

If Something Looks Wrong: A Decision Table

Use this to decide what to do next. It follows the remedies the makers publish rather than improvised fixes.

What you see	Device not yet set up	Device already holds funds
Seal damaged, missing or clearly re-applied	Pause setup, photograph everything, contact the maker through its official site	Treat it as a possible compromise: move funds to a new wallet on a device from a clean channel, with a new phrase
A recovery phrase or PIN was in the box	Do not use the phrase, the PIN or the device; contact the maker	Move funds immediately to a wallet whose phrase you generated yourself on a different device
Authenticity or firmware check fails	Stop; do not initialise; contact the maker (Trezor gives this instruction directly)	Move funds out; Trezor's guidance is to send them to a new wallet with a new backup and stop using the device and its backup
Device came from a reseller or seller later named in a warning	Do not initialise until the maker says what to do (Ledger's instruction in the October case)	Follow the maker's notice; in the October case, Ledger's advice was a new signer with a newly generated phrase
Device or app asks you to type your phrase into a computer, phone or website	Stop; a genuine device does not ask this	Assume the phrase may be exposed if you entered it; move funds to a fresh wallet
A "support agent" asks for your phrase, PIN or passphrase	Ignore them; Trezor says its support never asks for these	Same; then check whether you shared anything

Two cautions apply to every row. First, moving funds to a wallet restored from the same phrase on a new device fixes nothing, because the phrase is the key. Second, people in this situation are prime targets for "recovery" offers and fake support. If money has already been taken, our guide on reporting a crypto scam to the right agency lists the official channels, and the scam red flags checklist covers the pressure tactics to expect.

Edge Cases and Common Mistakes

Trusting one check over the others. A copied seal on a counterfeit box can look perfect, so the cryptographic check is the stronger evidence against replicas. But a genuine chip in a modified enclosure passes attestation, which is the mistake the October case exposed.

Running the check with software from a link in the box. Download the companion app yourself from the maker's site or an official store, since counterfeits can ship with apps that always report "genuine".

Assuming a firmware update fixes an old seed. Coinkite says plainly that updating firmware does not repair an existing affected seed. If a maker announces a seed-generation problem, follow its migration guidance for the seed itself.

Disabling the authenticity check to make an error go away. Trezor allows it, but says to do so only for unofficial DIY hardware. An error on a store-bought device is a finding, not an annoyance.

Forgetting the PIN limit while testing. Foundation says Passport Core is permanently disabled after 21 incorrect PIN attempts, and Trezor says a Safe 3 erases its wallet after 16. Test with a near-empty wallet and a written backup in hand.

Reading one brand's rules as universal. Firmware state, seal design and check timing vary by maker and model. Read the setup page for the exact model in your hand.

The Short Checklist

Print this or keep it next to the box:

[ ] Seller is the maker or appears on the maker's authorised reseller list; marketplace "Sold by" name checked

[ ] Device was ordered by me, new, not "open box", not a gift of unknown origin

[ ] Box, seal and any serial or bag number photographed before opening

[ ] Seal intact and matches the maker's current setup page for this model

[ ] Companion app downloaded by me from the official site or store

[ ] Firmware state on arrival matches what the maker says for this model; firmware signature verified where the maker offers it

[ ] Cryptographic authenticity or supply chain check passed

[ ] No recovery phrase or PIN in the box; backup cards blank

[ ] "Create new wallet" chosen; phrase shown only on the device screen; written by hand

[ ] Anti-phishing or security words noted, if the device offers them

[ ] Small test deposit received; receive address confirmed on the device screen

[ ] Backup check completed before the main transfer

If you are setting up your first device this week, the most useful next read is our step-by-step guide to withdrawing from an exchange into a new wallet, because the first transfer is where address and network mistakes cost the most. For the wider set of custody topics, see the self-custody and security hub.

Frequently Asked Questions

Can a genuine hardware wallet still be tampered with?

Yes. Ledger defines a tampered device as a genuine product whose hardware was modified after leaving the factory, and its security team states that its Genuine Check cannot detect spying implants if the original secure element is intact. That is why buying through the maker or an authorised reseller remains part of the security model, not just a shopping preference.

Does a passed genuine check mean my device is safe?

It means the secure chip holds a key the maker installed at the factory, so the core of the device is not a replica. It does not prove that nothing was added inside the case. Treat a pass as one strong piece of evidence alongside a clean purchase channel, intact packaging, and a recovery phrase you generated yourself on the device.

What should I do if my hardware wallet came with a recovery phrase already written down?

Do not use that phrase, do not enter it, and do not send funds to any address it produces. Ledger and Trezor both say a genuine device never arrives with a pre-filled phrase, and Ledger advises not using the device at all because the package has evidently been tampered with. Contact the maker through its official website.

Is it safe to buy a hardware wallet on Amazon or another marketplace?

It depends on who the seller is, not on the marketplace. Ledger says buying from its official storefront or an authorised reseller's storefront is safer when combined with its Genuine Check, and advises checking the "Sold by" name against its reseller list. Third-party sellers on the same product page are a different channel with an unknown history.

Should I open the device to look for an implant?

For most owners, no. Ledger points confident owners to an inspection tutorial but warns them to take care not to damage the device, and an untrained inspection is unlikely to be conclusive. If something about the package or behaviour worries you, contacting the maker and moving funds to a fresh wallet on a device from a clean channel is the documented remedy.

My device is already set up. Is it too late to check it?

No. You can still run the maker's authenticity check through official software, review where and how it was bought, and look for any of the warning signs in the decision table above. If the device came from a channel the maker has since warned about, follow the maker's notice; in the October 2026 reseller case, that meant moving funds to a new device with a newly generated phrase.

Sources

Ledger Donjon: Genuineness threat model, how attestation works, when the Genuine Check runs, the limits of seals and of the check against implants. Checked October 22, 2026.

Ledger Academy: Best practices to securely buy your Ledger signer, reseller rules, pre-seeding, counterfeit, tampered and unsolicited-device categories, the May 2021 example. Checked October 22, 2026.

Trezor: Safe device authentication check, certificate and challenge-response check, Safe 7 ML-DSA update, opt-out guidance. Checked October 22, 2026.

Trezor: Authenticate Trezor Safe 3, holographic seal, blank backup cards, ships without firmware, firmware signature check. Checked October 22, 2026.

Trezor: Get started with the Trezor Safe 3, setup confirmations, secure element check after firmware install, PIN attempt limit. Checked October 22, 2026.

Trezor: FW authenticity check failed, firmware revision and hash checks, what to do on failure, support never asks for backups. Checked October 22, 2026.

Coinkite: COLDCARD quickstart, tamper-evident bag and bag number, anti-phishing words, security status before new seed, user entropy, routine checks. Checked October 22, 2026.

Coinkite: COLDCARD firmware upgrade, verifying the signed release manifest and SHA-256 hash. Checked October 22, 2026.

Foundation: Passport Core setup, box seal codes, Supply Chain Validation, 2-of-4 firmware signing, Security Words, PIN limit. Checked October 22, 2026.

NIST SP 800-161 Rev. 1: Cybersecurity Supply Chain Risk Management Practices, supply chain risk concepts (counterfeit and malicious functionality). Checked October 22, 2026.

CryptosEyes publishes general educational research, not investment, legal, or tax advice. Device features and maker guidance change with new models and firmware, so confirm every step against the current setup page for your exact device, and contact the maker directly through its official website if anything about your device or its packaging looks wrong.