Fake cryptocurrency wallet apps drain funds on major app stores

Malicious developers are increasingly using the Apple App Store and Google Play to distribute counterfeit cryptocurrency wallet applications. These fake apps, which impersonate trusted brands, exploit user trust to steal seed phrases and drain self-custodied assets.

Recent incidents include a fake Wasabi Wallet app on the Apple App Store that resulted in the theft of 6 BTC. This marks the 27th wallet clone discovered on the App Store this year. Other notable impersonations include a fake Ledger app, which has been linked to $9.3 million in losses, and counterfeit versions of Leather Wallet and Rabby Wallet. The Rabby clone was associated with approximately $1.6 million in losses, while a fraudulent Leather app reportedly drained $120,000 in Stacks tokens.

Criminals bypass marketplace security by submitting initially harmless applications that reveal malicious behavior after approval, or by using established developer accounts and manipulated descriptions. While these incidents cause significant individual financial devastation and erode user confidence in self-custody tools, they have had a negligible impact on the broader Bitcoin market price.