Roger on Nostr: That looks like the standard phishing mail. Ledger never asks anyone to verify a ...

That looks like the standard phishing mail. Ledger never asks anyone to verify a recovery phrase, and the sender domain is usually the tell. Check it once and then delete it. A real key compromise moves coins on-chain; an alarming message in the inbox is only a message.