Is It Safe to Buy a Secondhand Hardware Wallet?

Short answer

No. Even if the original packaging looks "brand new unopened," the tamper seal is intact, the seller has high feedback ratings, and there's a "private message for genuine certification" badge — secondhand hardware wallets are one of the few electronics you should never buy used. The supply-chain attack here is too easy and too well-documented to dismiss.

The attack mechanism

The attacker buys a genuine new Ledger or Trezor, initializes it with a seed they record, factory-resets the device, repackages with a "reset card" that says "your device has been factory-reset for security." The buyer unboxes, sees "factory-reset" messaging, generates what they believe is a fresh seed — but the device actually re-uses the attacker's pre-recorded seed under the hood, or the firmware has been quietly modified to leak the seed during setup.

Several variants exist: tampered firmware (modified to email the seed to a remote server), pre-recorded seed (the device's "fresh generation" returns a deterministic seed the attacker already knows), or simply replacing the device PCB with a similar-looking malicious version.

Documented cases

Reddit r/Bitcoin and r/CryptoCurrency archives contain hundreds of "I bought used Ledger, lost my coins three months later" reports going back to 2018. The pattern is consistent: buyer transfers crypto to the address, weeks pass, attacker waits for accumulation, then drains the wallet in one transaction.

The Ledger 2020 customer-data breach made this worse: 270,000 customer addresses leaked, providing a target list for "fake Ledger box mailed to your house" supply-chain attacks.

The cost-benefit math

Ledger Nano S Plus, brand new from Ledger.com, is $79. A "60%-off used Ledger" saves you $47. Your crypto stack on this device is presumably $5K-$500K. The savings-to-risk ratio is upside-down by 3-4 orders of magnitude. Buy new from the official store. The shipping fee is irrelevant.

What to do if you already bought used

Treat the device as compromised. Do not transfer crypto to its addresses. Use it as a "demo unit" for testing only. Buy a fresh device from the official store for actual storage.