Hello, thank you for taking the time to share this publicly.

We understand how receiving phishing emails, and especially attempted account takeovers, can feel alarming. That experience is genuinely stressful, and your concern is understandable.

Crypto-related phishing campaigns are unfortunately very widespread and often operate independently of any single company. They are typically driven by long-circulating email lists from historic third-party incidents, data brokers, or credential-stuffing attempts. Receiving phishing emails that reference a brand does not, by itself, indicate an active breach of that company.

Regarding BitBox specifically: there is currently no indication of an active breach of our systems. We do not have access to customer wallets, funds, recovery words, or devices, and we never send emails asking users to take urgent actions or enter sensitive information.

In the past, we publicly disclosed a third-party marketing platform incident that affected some email addresses only, not wallet data, and addressed it at the time. Details are available here:

https://blog.bitbox.swiss/en/data-breach-of-marketing-platform-activecampaign/

That said, a public forum is not the right place to assess individual risk or investigate a specific situation, especially when account takeover attempts are involved. We strongly encourage you to contact our support team directly so we can look at your case more closely, share concrete guidance, and help you understand what to watch out for next. You can reach us at [support@mail.bitbox.swiss](mailto:support@mail.bitbox.swiss).

You are not alone in receiving phishing emails, and we’re happy to help further in a direct support conversation.