Coldcard investigates phishing link on official X account

• Coldcard is investigating how a phishing link appeared on its official X account before the post was deleted.
• The hardware wallet maker says its security measures remain in place and its review found no matching access records.
• Coldcard has contacted X to investigate possible unauthorised access involving the platform or its administrative systems.

Coldcard is investigating a phishing link posted on its official X account before the message was deleted.

The hardware wallet maker has used offline two-factor authentication and restricted account access since 2017.

Coldcard has asked X to examine how the post appeared despite its existing security measures.

The company warned users against interacting with the link and identified coldcard.com as its only official website.

Coldcard found no matching login, session or access records that explained the post’s appearance.

The investigation is examining whether unauthorised access involved X’s platform or its administrative systems.

The incident raises questions about how phishing content can appear on an account with restricted access and established security controls.

Coldcard’s investigation remains ongoing, with the source of the unauthorised post still unresolved.