@NVK This is the letter. A friend received it. They actually got 2 with 2 different reference numbers. Their email on the purchase was with Proton and is secure as far as we can tell. The QR in the bottom is a shortened link and I'm not going to open it. The address is the address they shipped a COLDCARD to. They haven't even opened or initialized the device, as it's a spare. The envelope has a postmark from Metroplex, MI with a physical hand-applied US stamp. We're trying to figure out who in the chain could put this together and send a targeted physical letter. This is a very passive hodler with no social media presence or really any of the typical exposure points.