A cybersecurity researcher dismantled a major scam after purchasing a cold wallet from Ledger on a Chinese platform.

"The price was suspicious, although at first glance the device's packaging looked authentic.
However, when I opened the device, I found that the chip inside was completely different from the original.
The scammers erased the letters on the chip so that it wouldn't be clear what it really was.
The internal system (firmware) claimed to be an official Ledger version that doesn't even exist: Ledger Nano S+ V2.1.
Every recovery phrase and PIN code the user entered was stored in plain text and instantly sent to the attackers' server.
The system was designed to drain wallets across about twenty different blockchain networks.
Additionally, the seller included a fake and modified version of Ledger's original app with the product.
Never buy a Ledger (or any hardware wallet) anywhere other than the official site or authorized resellers."
I got this information from the r/ledgerwallet forum on Reddit. From user Past_Computer2901.