Even emails from official email addresses could be phishing scams! Another bizarre incident: Today, users of the hardware wallet Passport received a "recall notice": The sender appeared to be the official Foundation domain, with a subject line stating "Your Passport funds are at risk." Some emails even included your real name, address, and purchase history, ultimately tricking you into pasting your mnemonic phrase into a web wallet. The official statement is: Cloudflare's API key was stolen, and the CEO added that customer service emails were likely also compromised; funds are safe, hardware has not been compromised, the key has been revoked, and the malicious domain has been taken offline. Last week, Keystone also confirmed a leak of customer information from its official website store, but the specific method of the leak is still unknown. This is terrifying! The hardware wallet market is on edge! 1) Any email asking you to enter, export, or change your mnemonic phrase is a scam. 2) Don't click on email buttons; manually open the official website to verify announcements. 3) When buying hardware wallets, use a forwarding address whenever possible, and avoid using your real address. Highly recommend saving this!