SafePal confirms that Italian users received impersonation phishing letters.

SafePal confirmed that Italian users have received physical phishing letters falsely bearing its name, tied to the customer data breach the company disclosed in August. The wallet provider said its infrastructure remains secure, that it does not send physical mail or request seed phrases, and urged users not to scan QR codes in suspicious letters and to report them. The August breach exposed order information for about 39,798 customers, including names, contact details, shipping addresses and purchase details, but no seed phrases or private keys. The incident matters because it shows how leaked order data can be weaponized for targeted phishing even when wallet keys stay safe. What to watch next is whether other regions report similar letters and whether SafePal expands user warnings or tightens data handling with partners.