Topic: Where can I buy a hardware wallet? (Read 419 times)

Hello

If someone needs! I sell Ledger wallet Nano X for same price of ledger website (free shipping in Italia) and 4 euro in other European countries .

http://rover.ebay.com/rover/1/724-53478-19255-0/1?icep_ff3=2&pub=5575378759&campid=5338273189&customid=&icep_item=124384720619&ipn=psmain&icep_vectorid=229494&kwid=902099&mtid=824&kw=lg&toolid=11111

Unfortunately for me who lives in Indonesia, some Indonesian resellers, such as those listed on the ledger official retailers, are not actually in Indonesia, but in a nearby country. At least the advantage lies in the cost of delivery and also the estimated time to arrive, it can be cheaper and faster than ordering directly from France.

By the way, https://shop.ledger.com/pages/retailers also lists sales links from Official stores on Amazon in several countries.

Don't trust what people on Amazon/Ebay and the likes are saying or writing on their profiles. Do the necessary checks yourself. Ledger has a retailers network that you can purchase your devices from. But you should only use the ones they have posted on their official site. If for some reason you can't or don't want to purchase from the official site, you can use one of the resellers.

Check out the list of their official retailers here:
https://shop.ledger.com/pages/retailers

It's not like you'd only need to solder a new chip onto the PCB to have it physically compromised.
You'd either need to find a vulnerability which allows you to (for example) flash malicious firmware onto the nano without it being rejected or additionally compromise the PC the hardware wallet is going to be used with.
That's way too much effort for someone selling them on a platform. It simply is not lucrative enough.

Other things would be easier to implement. A small antenna for example to trigger button presses from ~10-15 meters.
But this would require the attacker to be close enough to actually make use of it. Which is also very unlikely for a seller on amazon/ebay.

I would always say buy it directly from ledger.  I would be very skeptical from getting it on ebay/amazon.



But what i notice was when i checked amazon.com... the price is not only cheaper, but the seller seems be called ledger reseller.  But is that one hundred percent legit?  I read the last few reviews and some ppl said the ledger appears to be tampered with and opened and they returned it.  But what do they mean by official ledger seller or reseller?  Their location they put down is also France.  So it's not exactly from ledger themselves... but ledger sells it to them and they resell it?



The price they seem to charge is a bit like over 50 dollars only.  But how do you know they are legit?  Example what if someone buys it from them then do something to it and send it back to them?  Then they send it back to you?



Also i asked this before but there has been zero cases of someone using a ledger that has been really physically tampered with right?  Like they did something to the software to the point where even if you reset it once or twice and get a new seed... its compromised?  I see lot of ppl talk about not buying off ebay or amazon but has there been any case of a tampered ledger that is not that social engineering trick where they give you the seed and pin and things like that?  Since that is like a trick... that isn't like compromised.



The more i think about it, is it one hundred percent safe even if someone gives or sells you a used nano ledger because a reset should automatically wipe it clean?  I just haven't heard any cases of a real tampered ledger.  Like all i hear is as long as you reset the device, you are fine. 

There is much more to be concerned about when buying from a third party than delivery time and after sales customer support.

A large number of "hacks" from hardware wallets (if you can call them that), have been from people buying devices from third parties who have pre-initialized the device. The third party prints out an official looking "seed card" (perhaps even behind some scratch off paneling to make it look more genuine) and includes it in the box, while keeping a copy of the seed phrase for themselves. If the user doesn't know to reset the device and just uses it out the box, then all their coins are easily stolen.

There is also the concern about supply chain attacks. There were a number of fake Trezor One devices reporting to be circulating. As far as I am aware, there is no publicly revealed way to create a fake Trezor T or Ledger device which will still be usable with their software, but that doesn't mean one doesn't exist.

For the sake of saving a few bucks or saving a day or two in shipping, it is not worth risking all your funds. Just buy directly from the manufacturer.

99.9% yes. They care for their reputation and they are in business for long so you will have an assurance that the product you will receive is genuine and untouched.

And if ever the 0.01% struck you although the odds are low, you can report it directly to the manufacturer for a heads-up.


I'm not saying that buying from resellers is totally risky but if for delivery time issues (I think that's the only difference between direct against resellers), don't mind it and instead head to the official store.

Have seen some issues about buying from resellers in some of our local crypto groups before so better be safe. And in some cases, resellers don't mind you after they make a sell. If you have any problem, you will be left alone.

Yeah, it would strange if they wouldn't accept Bitcoin. And yeah - BitPay sucks. Don't know much about Crypto.com, but I believe it's better choice than BitPay. But it's a bit strange to see company like Ledger giving so limited options for crypto users to pay. It would be nice if they would use BTCPayServer.

He'll get kicked off of Amazon fairly soon, but there is nothing stopping him from re-registering under a different name and continuing to pawn off second hand goods. And he certainly isn't the only one. You have to be careful because sometimes Amazon will default to these third party resellers if they are much cheaper or the official seller is out of stock, and you can end up buying a second hand device without even realizing it.

Still, even if you go buy from the official Ledger via Amazon, it's still another step in the supply chain and another group of people who have their hands on your device. If you are worried about supply chain attacks, then it's something to consider. As I said above, I think the safest option all round is to buy direct from the website using fake details, pay in anonymized bitcoin, and ship to a PO Box.

There have been cases, probably the biggest sum I've ever heard was this one, nearly 40k
https://bitcointalksearch.org/topic/2018-01-08-life-savings-stolen-from-second-hand-ledger-hardware-wallet-2711295
Or a failed scam:
https://bitcointalksearch.org/topic/ledger-nano-s-scam-device-from-ebay-3406938

Bottom line, never buy a second-hand device if you're not 101% sure what you're doing.


Lol, at the start 9 full 5-star ratings then dropping to 1-2 stars for shipping used goods sold as new, rather than a company it looks more like a guy selling whatever he has got his hands on, one or two items from a brand, no focus one a certain category, yeah avoid this guy at all cost.




 

Ledger itself suggests that users can buy their wallets on Amazon. But it has to be an official re-seller. Whatever your friend bought didn't come from the Ledger reseller network for sure.
Ledger has Amazon stores for USA, UK, Germany, Japan, and many other countries. These are OFFICIAL resellers.

When your product arrives, you should inspect it and follow the guidelines as described in Check if device is genuine.
The most important thing is to generate a new seed and never use one that came with the device.

If you want to dive even deeper into this subject, you can also inspect the hardware components of your device. Refer to check hardware integrity for that. 

OP I just found this:
So you will get a nice discount if you order when this promo is running. It does not save much but still some off is better than nothing.

As long as you buy it from the official Ledger shop on Amazon, then you are correct. Amazon also hosts plenty of third party sellers, however. For example, a quick search on Amazon.com right now finds a company called "Elite100" which is selling Ledger Nano Xs (and undercutting Ledger themselves by $1). Note that they only have a 58% positive rating. Obviously you should avoid these resellers.

Something which hasn't been mentioned yet in this thread if the privacy of your own personal details. Ledger's database was recently hacked and several thousand customers had their real names and addresses exposed. There is no telling if this is going to happen again to them or another hardware wallet manufacturer. To avoid this completely, you can order under fake details and have it delivered to a PO Box or a drop off address for collection. If you can't do this, then once you have ordered you should contact them and request that they delete all the data they hold about you as per their Privacy Policy.

That would be ironic if a bitcoin hardware wallet company does not accept bitcoin :-P

I just checked their checkout page (with fake information) to see their payment option and here we have it:


I hate to see bitpay by the way.

As everyone have mentioned, grab your favourite hardware wallet ONLY from their official website. Doesn't matter, you go for trezor or ledger.

If you're confused between the two, go check out this this comparison of Trezor Vs Ledger - https://www.latestonnet.com/2020/05/03/trezor-vs-ledger/.html

Hope it helps.

It seems as if the device already had a pregenerated seed, or the user used a fake UI and compromised its data right at the beginning.
 

I paid for my Ledger HW with BTC, and I can confirm that Trezor accepts BTC as a means of payment also. Personally, it doesn't make much sense for some HW manufacturers not to offer the option of paying with BTC - although some users will prefer to use cards or PayPal.

Really?  What types of horror stories have you heard, exactly?  Can I assume that you mean that the devices had been tampered with?

I can understand not wanting to buy a HW wallet from eBay, but to the best of my knowledge if you bought a Ledger from Amazon, for example, it's Ledger that ships it.  I've bought two of them from Amazon so far and have hadn't had a security issue yet.

What kind of wallet was it?  That's disturbing, assuming it's true--no offense.

In any case, there's nothing to be lost or gained by buying a HW from the official site except whatever perks you'd normally get if you bought it from Amazon or some other place.  Don't know if OP has his mind made up yet, but I'd go with a Ledger, either a Nano S or X. 

I'm pretty sure you can even pay with bitcoin if you wanted to.  That might be the case with Trezor and other manufacturers as well, but I haven't checked.

The most used and trusted hardware wallets are Ledger and Trezor.
It's recommended to by them from their respective official online shops:
Trezor: https://shop.trezor.io/
Ledger: https://shop.ledger.com/
Or from one of the authorized resellers. Hete is the official list of autirized resellers:
Trezor: https://trezor.io/resellers/
Ledger: https://shop.ledger.com/pages/retailers

If they've made up their mind for the safety of their funds and believe that they can't take the risk of going with a paper wallet for their funds' safety, I think they should buy something reliable and cheap and if not a ledger or trezor, maybe a cryptosteel wallet which stores paper wallet keys in itself can do the job as they are purely made of steel and can store many paper wallets all at once. One more thing, there are just too many alternatives available in the market that nobody can actually tell them what to do, and it's their decision in the end.

Meanwhile, check out https://coldti.com/

If you are willing to buy a hardware wallet than the first thing I will suggest you don't go Amazon, eBay and other e-commerce platforms around you. You can be getting ripped off. One of my friends had a bad experience with a wallet from amazon. They somehow hacked into it( maybe they already had something on it)  and stole all his funds. But fortunately, he just kept only 1 eth for testing the wallet on the first night and the incident happened.

So if you wanna buy I suggest you buy it from the official websites. As many people mentioned above me, you will find the links there.