Buy Direct, Never a Marketplace: Hardware Wallet Supply-Chain Risk

Always buy a hardware wallet new and direct from the manufacturer, or from an official reseller the maker lists on its own website — never a third-party marketplace listing, an auction, or a used device. This is the cheapest and most important security rule in self-custody, and skipping it undoes everything the device is meant to protect. A tampered or pre-initialised wallet whose recovery phrase the seller already knows is a documented way people lose everything the moment they deposit.

Why the source matters so much

The source matters because a hardware wallet is only trustworthy if you can be sure no one touched it before you. The device's whole security rests on it generating a fresh, secret key that only you ever see. If someone in the supply chain sets it up first, or swaps it for a lookalike, they can know your recovery phrase before you do — and then simply wait for you to fund it and sweep it clean. Nothing about the chip, the secure element or the air gap helps, because the attacker isn't breaking the device; they're handing you a compromised one.

How tampering scams actually work

A few patterns recur, and they've all been seen in the wild:

• Pre-initialised devices: the wallet arrives already set up, often with a card telling you to "use this recovery phrase" — which the scammer generated and kept. Any deposit is instantly stealable.
• Fake "sealed" units: counterfeit or resealed packaging on a marketplace, sometimes with a fake scratch-off or hologram, sold at a small discount to look like a bargain.
• Altered devices: hardware modified or firmware replaced so the device leaks the seed, then resold as new. Rare, but the reason you verify authenticity in the official app.
• Used devices: even a genuinely honest reseller can't prove they didn't copy the seed. A second-hand hardware wallet is worthless for security; the whole value is in being untouched.

What about Amazon and big retailers?

This is the honest grey area. Large marketplaces can mix inventory from many sellers, and counterfeit or returned units have slipped through, so buying a wallet there is riskier than the manufacturer's own store even when the listing looks official. Some makers do sell through specific, named authorised channels — but the only way to know a channel is genuinely authorised is to find it listed on the manufacturer's website, not to trust the retailer's own claim. When in doubt, buy from the maker directly; it's usually the same price and removes all ambiguity.

If a device ever arrives looking opened, pre-configured, or 'ready to use', do not transfer a single coin to it. Set it aside, contact the manufacturer, and treat any pre-supplied recovery phrase as a trap. This one habit prevents an entire category of total-loss scams.

Where to go from here

Every buy link on our best hardware wallets page points to the manufacturer's own store for exactly this reason. Once your device arrives, the tampering scam is just one of several to watch for — the rest are in our guide to hardware-wallet scams.

What 'official reseller' actually means

"Direct from the manufacturer" is clearest, but many makers also sell through authorised resellers, and those can be legitimate — the catch is how you confirm one is genuine. The only reliable method is to start on the manufacturer's own website and use their list of authorised sellers or store locator, then go to that seller. Never do it the other way around: a random shop, marketplace storefront, or ad claiming to be "an official Ledger/Trezor reseller" proves nothing by saying so. If the maker doesn't list them, treat them as unauthorised, however professional the listing looks.

Be especially wary of three signals: a price noticeably below the maker's own, packaging described as "opened for inspection" or "resealed," and sellers who only take irreversible payment. Any one of them is a reason to walk away. The safest habit, and the one we follow with every buy link on this site, is to skip the question entirely and buy from the manufacturer's store — the price is almost always the same and the ambiguity disappears.

The cost of buying direct is basically zero

People sometimes chase a marketplace listing to save a few dollars or get faster shipping, and it's worth naming how bad that trade is. You're risking the entire value of everything you'll ever store on the device — potentially all of it, instantly — to save the price of a coffee or a day of delivery. Manufacturers ship worldwide, often with reasonable delivery times, and their prices are the reference price everyone else marks against. There is simply no version of this maths where the small saving justifies the tail risk of a tampered device.

It helps to picture the supply chain you're trusting. When you buy from the manufacturer, the device travels maker to courier to you, with no stop where someone has both the time and the motive to open it, set it up, and reseal it. Every extra pair of hands between the factory and your desk — a marketplace middleman, a returns pile, a reseller's stockroom — is a link where tampering becomes possible. Buying direct isn't about brand loyalty; it's about keeping that chain as short and accountable as it can be, so the sealed device you initialise is genuinely new.

And if you've already bought from a questionable source, don't panic, but don't fund it either. Set up the device and check its authenticity in the manufacturer's official app; if it flags as non-genuine, or if it arrived pre-configured, contact the maker and don't move any crypto to it. When in doubt, the safe move is to buy a fresh device direct and generate a brand-new wallet on it. The cost of a second device is trivial next to the cost of trusting a compromised one.