# Coldcard Investigates Phishing Link Published on Official X Account

- URL: https://stocks.freetheai.org/news/coldcard-investigates-phishing-link-published-on-official-x-account-27ba7e
- Published: 2026-10-11T10:22:44Z
- Category: crypto; sentiment: bearish; impact: medium
- Written by our AI from expert market sources across the web for FreeTheAI Stocks, built by Vibhek Soni
- How write-ups are made: https://stocks.freetheai.org/how-we-write
- Not financial advice: https://stocks.freetheai.org/disclaimer

Bitcoin hardware wallet provider Coldcard has launched an investigation after a malicious phishing link was published on its official X account on Sunday. The unauthorized post has since been deleted. Company management warned users not to click or interact with the link and emphasized that its only legitimate web domain is coldcard.com.

The security incident comes despite Coldcard using offline two-factor authentication and maintaining restricted access settings on its account since 2017. Security breaches on official social media channels pose major risks to cryptocurrency holders, who can lose funds if lured to fake websites. The wallet provider previously suffered a major security exploit in July that resulted in at least $100 million in Bitcoin stolen across thousands of wallets.

Coldcard has reached out to platform representatives at X to review all account permissions and determine how the unauthorized message was published. Management stated that it will share additional verified security updates once its internal review yields further details.

## Key points

- Coldcard is investigating an unauthorized phishing link published on its official X account on Sunday.
- The post has been deleted, and Coldcard advised users that its only official website is coldcard.com.
- The company has used offline two-factor authentication and restricted access for the account since 2017.
- Coldcard contacted X and is conducting a complete review of all account access to determine the cause.

## Questions and answers

### What happened to Coldcard's official X account?

A phishing link was published on Coldcard's official X account on Sunday. The company has since deleted the post and is investigating how access was gained despite using offline two-factor authentication.

### What is Coldcard's official website?

Coldcard stated that its only official website is coldcard.com and urged users not to visit or interact with any unverified links.

### How is Coldcard responding to the X account security incident?

Coldcard has contacted X, is reviewing all account access permissions, and plans to share further verified updates as the investigation proceeds.