How do you spot a fake crypto wallet app?

A fake crypto wallet app is a copy of a real wallet, or a made-up one, designed to steal the crypto it appears to protect. It may look identical to the original and sit in an official app store. The giveaway is usually what the app asks you to do, and where it came from.

How do fake crypto wallet apps steal funds?

There are three main methods. Some ask you to "restore" or "sync" a wallet by typing in your seed phrase, the backup words that control it, and send them to the attackers. Others connect to your wallet and ask you to approve a transaction that hands over your tokens, the technique explained in crypto phishing and wallet drainers. A third kind hides malware inside an ordinary-looking app.

Kaspersky reported in February 2025 that a trojan it named SparkCat had reached Apple's App Store, the first known case there of malware that reads text in photos. Once given gallery access, it scanned saved screenshots for recovery phrases and uploaded them. Infected Android apps had been downloaded more than 242,000 times.

What happened with the fake Ledger Live app?

In late 2023 a tampered copy of Ledger Live, the companion app for Ledger hardware wallets, was listed on the Microsoft Store. Bitdefender reported that it had been available from October 19 and that its developer took about $768,000 in crypto before Microsoft removed it, after the money was gone. An official store listing is not proof an app is genuine.

A similar case hit Android. Check Point found a fake WalletConnect app that stayed on Google Play for more than five months in 2024, was installed over 10,000 times and stole about $70,000 from at least 150 victims. When victims posted negative reviews, the developers buried them under fake positive ones.

How do you spot a fake MetaMask app?

MetaMask says to install only through the download page on its own website or from an official browser extension store, and it publishes its Chrome extension ID so users can compare it. Its other red flags apply to most wallets:

• A request for your recovery phrase on a website or in a pop-up.
• Free token or NFT offers in the wallet's name, which MetaMask says it does not make.
• Pop-ups you did not trigger, or transaction screens with little detail.
• "Support" that contacts you first on social media or by direct message.

Checking the publisher name against the official site also helps, though reviews can be faked.

What is a fake crypto trading app?

Some fake apps pose as investment platforms rather than wallets. In a July 2022 notice, the FBI said criminals persuaded US investors to download fraudulent apps, sometimes using the names of real financial firms, and identified 244 victims with about $42.7 million in losses. Withdrawals were blocked with demands for "taxes." That pattern overlaps with fake crypto exchanges and pig-butchering scams. The FBI advises caution with any app recommended by someone you have not met in person.