Affected purchase channels

Every channel reported to have shipped implanted devices, plus a checklist to classify your own unit. Items marked reported come from victim reports and press coverage; open means unresolved.

Channels reported affected

Channel	Region	Notes	Label
CryptoBilis — cryptobilis.com web store and physical retail stores	Malaysia / SEA	Authorized Ledger reseller for the region; the single largest reported source of implanted units	reported
Shopee storefronts (including "official"-branded shops)	MY, ID, PH, SG	Marketplace storefronts are not all vendor-operated — check the seller entity on your invoice	reported
Lazada storefronts	MY, ID, PH, SG	Same caveat as Shopee	reported
Amazon Japan	Japan	Both Amazon-direct and marketplace sellers reported; check "sold by" on your order	reported
Yahoo Auctions Japan	Japan	Secondary-market units — provenance unverifiable by definition	reported
Metapod — Singapore Changi Airport retail	Singapore	Airport retail; travelers from many jurisdictions affected	reported
MediaMarkt Saturn	Germany	Reported units sold in-store and via mediamarkt.de/saturn.de	reported
Unnamed EU reseller	EU	Named in reports but not yet confirmed — if you know which reseller, submit a report	open

Channels not currently reported affected

Channel	Label
ledger.com direct sales	reported not affected

"Not currently reported affected" is not a guarantee — it means no verified reports yet. If in doubt, run the checklist.

Was your device affected? — the checklist

Work through in order. Stop and preserve the moment any answer is yes.

1. Where did you buy it? If the seller was any channel in the table above — or any third-party seller you cannot trace back to Ledger directly — treat the unit as suspect. Check the actual seller entity on your invoice/order page, not the storefront name.

2. When did you buy it? Reported implants concentrate in units sold in the months before the October 2026 disclosure. The exact exposure window is open — if you bought from a listed channel at any point in 2025–2026, treat it as suspect until the vendor publishes batch ranges.

3. Is it sealed/unopened? Good — do not open it. It is worth more intact as evidence than as a device. Go to the preservation protocol.

4. Did you generate a recovery phrase on it? If yes and the channel is suspect: that phrase must be treated as burned, even if nothing has moved. Plan migration to a fresh seed on a clean-provenance device — and never type the old phrase into anything, including "verification" pages.

5. Did funds leave wallets you created on it? Preserve the device powered-off, record the drain transaction IDs (from your exchange history or the blockchain explorer — never by re-entering the phrase), and file reports: emergency contacts per jurisdiction. Fast reports are what produced the ~$10M Tether freeze.

6. Is the packaging suspicious? Community-reported tells include re-sealed shrink-wrap, mismatched or missing security stickers, and serial labels that don't match vendor records. These are reported indicators, not proof — a compromised unit can have perfect packaging.

What you cannot do: check for the implant by turning the device on. Initialization is exactly what exposes the phrase. If you need to know whether a unit is clean, the answer is provenance (who sold it), not power-on testing.

Then what?

Suspect unit, unopened: preserve it → preserve.html, then submit a sealed report.
Suspect unit, used, no loss: migrate funds to a fresh seed; preserve the device.
Funds drained: emergency contacts first (freeze windows close fast), then sealed intake.
Refund/replacement: pursue the retailer in parallel — the emergency page lists consumer-protection channels per country.