{"id":11214,"date":"2026-07-28T18:21:05","date_gmt":"2026-07-28T18:21:05","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=11214"},"modified":"2026-07-28T18:21:05","modified_gmt":"2026-07-28T18:21:05","slug":"apples-app-store-promoted-fake-bitcoin-wallet-that-stole-1-8m-after-developer-spent-a-year-warning-them","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=11214","title":{"rendered":"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them"},"content":{"rendered":"
<\/p>\n
\n
Apple\u2019s tightly controlled App Store is facing renewed scrutiny after three Bitcoin holders alleged they lost $1.8 million to a fake crypto wallet, adding to a growing list of malicious wallet apps that have reached users despite the company\u2019s screening process.<\/p>\n
The lawsuit, filed July 24 in California, accuses Apple of failing to adequately review and remove applications impersonating Sparrow Wallet while promoting the App Store as a safe and trusted source for software.<\/p>\n
The case follows warnings dating back more than two years about fake Sparrow apps and comes months after researchers identified 26 applications impersonating major crypto brands across Apple\u2019s ecosystem.<\/p>\n
Together, the incidents are putting pressure on one of Apple\u2019s longstanding arguments for maintaining tight control over software distribution: that screening applications before they reach users provides greater protection against fraud and malicious software.<\/p>\n
Sparrow developer warned Apple more than a year before losses<\/h2>\n
Apple\u2019s exposure in the case rests less on the initial appearance of a fraudulent app than on what the company allegedly knew before later victims were hit.<\/p>\n
Sparrow founder Craig Raw had been flagging unauthorized mobile versions of his wallet since early 2024. Sparrow is a desktop-only product, so an iPhone app bearing its name should not have required a complex technical investigation to identify as an impersonator.<\/p>\n
Yet the complaint says variants carrying the Sparrow name continued to surface inside the App Store over the following year.<\/p>\n
The first plaintiff cited in the lawsuit, Jalen Delgado, allegedly downloaded one of those apps in May 2025. After supplying his seed phrase, he lost just over 1 BTC, valued at about $120,000 in the filing.<\/p>\n
The alleged notice to Apple became more direct two months later.<\/p>\n
James Ramirez says he lost 7.4 BTC, worth approximately $875,000, after using another Sparrow impersonator on July 25, 2025. He reported both the application and the theft to Apple that day.<\/p>\n
Christopher Ellis allegedly encountered a Sparrow app through the App Store nine days later. He entered his recovery phrase and lost crypto assets valued at roughly $840,000, according to the complaint.<\/p>\n
That sequence is central to the plaintiffs\u2019 case. They are arguing that Apple was no longer dealing only with a previously reported brand impersonation by the time Ellis was targeted. It had allegedly received a fresh report linking a specific fake wallet to a major Bitcoin theft.<\/p>\n
The complaint further claims Apple did more than distribute the app. It alleges the platform ranked the Sparrow impersonator and surfaced it within cryptocurrency app collections, potentially increasing the credibility and reach of software masquerading as an established wallet.<\/p>\n
According to the lawsuit:<\/p>\n
\n
\u201cDespite multiple reports made to Apple that its App Store hosted fraudulent and dangerous applications, Apple failed to warn consumers that spoofed wallet apps, including fake Sparrow applications, had appeared in the App Store and posed a serious risk of theft of cryptocurrency, seed phrases, private keys, wallet credentials, and other sensitive account information.\u201d<\/p>\n<\/blockquote>\n
Apple says it removed fraudulent Sparrow apps and terminated the developer accounts responsible for them.<\/p>\n
The company has also pointed to its reporting channels and said it acts when applications are found to breach App Store rules.<\/p>\n
Raw\u2019s experience, however, illustrates the difficulty legitimate developers have faced in stopping the impersonations.<\/p>\n
Last month, Raw revealed that he\u00a0submitted a basic iOS listing intended to tell users that Sparrow had no official mobile version.<\/p>\n
Apple initially treated that submission as potentially deceptive and warned that his developer account could be closed, according to Raw, before later reversing course.<\/p>\n
The episode adds another layer to the lawsuit\u2019s argument: Apple allegedly struggled not only to keep impersonators out, but also to distinguish the genuine wallet developer from those misusing his brand.<\/p>\n
Apple’s App Store fake wallet problem has spread beyond Sparrow<\/h2>\n
The Sparrow dispute is part of a wider wave of crypto wallet impersonation targeting Apple users.<\/p>\n
Kaspersky Threat Research said in April that it had identified 26 fraudulent applications mimicking crypto brands including MetaMask, Ledger, Trust Wallet, Coinbase, TokenPocket, imToken and Bitpie.<\/p>\nFake Crypto Applications on Apple’s App Store (Source: Kaspersky)<\/figcaption><\/figure>\n
The campaign had been active since at least fall 2025 and was linked with moderate confidence to threat actors behind SparkKitty, according to the cybersecurity firm.<\/p>\n
The attack was more elaborate than simply publishing a malicious wallet directly through the App Store.<\/p>\n
Kaspersky found that the applications could redirect victims to phishing pages designed to resemble Apple’s marketplace and persuade them to install developer profiles. Those profiles could then be used to install trojanized versions of crypto wallets outside the App Store.<\/p>\n
Once installed, the malicious software targeted the credentials controlling users’ assets.<\/p>\n
For hot wallets, the malware monitored wallet recovery or creation screens for seed phrases. Attackers obtaining those words could then gain control over the victim’s funds.<\/p>\n
Cold-wallet users faced a similar social-engineering threat. Fraudulent software impersonating interfaces associated with hardware wallets could persuade victims to surrender recovery credentials that should never be entered into an unverified application.<\/p>\n
The campaign largely targeted users of Apple’s Chinese App Store, where official iOS versions of several wallets being impersonated were unavailable.<\/p>\n
But significant losses involving fake wallet software have also emerged in the United States.<\/p>\n
American musician Garrett Dutton, better known as G. Love, said in April that he lost 5.9 BTC after downloading what he believed was legitimate Ledger software from Apple’s App Store.<\/p>\n
\n
\n
CryptoSlate Daily Brief<\/span><\/p>\n
Daily signals, zero noise.<\/h3>\n
Market-moving headlines and context delivered every morning in one tight read.<\/p>\n
Dutton entered his recovery phrase when prompted by the application. His Bitcoin, worth roughly $424,000 at the time, was subsequently transferred away.<\/p>\n
Blockchain investigator ZachXBT traced the stolen assets to deposit addresses associated with crypto exchange KuCoin, which temporarily froze a suspected account as the incident was investigated.<\/p>\n
The episode closely resembles the allegations at the center of the Sparrow lawsuit: users encountered software carrying the identity of an established crypto wallet through Apple’s ecosystem, trusted it enough to enter recovery credentials and lost control of their assets.<\/p>\n
Crypto scams challenge Apple\u2019s App Store security pitch<\/h2>\n
The repeated incidents are increasingly colliding with how Apple markets its control over software distribution.<\/p>\n
Apple describes the App Store as a \u201csafe and trusted place\u201d and says applications undergo a review process intended to protect users from fraud, malware and other security threats.<\/p>\n
That promise has also supported Apple’s broader defense of its tightly managed ecosystem.<\/p>\n
The company has argued that allowing unrestricted sideloading could weaken privacy and security protections on its devices, while its centralized review process allows potentially dangerous software to be intercepted before reaching customers.<\/p>\n
Crypto wallets create a particularly difficult test for that model because an application does not necessarily need sophisticated malware to cause an irreversible loss.<\/p>\n
A convincing imitation can be enough.<\/p>\n
Seed phrases typically provide control over the assets associated with a self-custodied wallet. Once a user enters those words into malicious software, attackers can transfer the assets to addresses they control, with no bank or payment processor capable of reversing the transaction.<\/p>\n
That makes the perceived legitimacy conveyed by an app marketplace especially important for crypto users.<\/p>\n
The Sparrow plaintiffs argue that Apple’s own representations encouraged them to believe software distributed through the App Store had been sufficiently vetted. They are seeking reimbursement for their stolen assets, along with compensatory and punitive damages, restitution, and legal fees.<\/p>\n
They also want Apple to improve and publicly disclose its procedures for detecting fraudulent applications and introduce warnings about risks associated with cryptocurrency apps.<\/p>\n
Whether Apple bears legal responsibility for the losses remains unresolved, and the company can contest both the plaintiffs’ reliance on its security representations and their decision to enter sensitive recovery credentials into third-party software.<\/p>\n
Apple also points to the scale of threats its review process already prevents.<\/p>\n
The company said last year that the App Store blocked more than $9 billion in potentially fraudulent transactions between 2020 and 2024, including more than $2 billion in 2024 alone.<\/p>\n
During 2024, Apple said it rejected nearly 2 million app submissions that failed to meet standards for security, reliability and user experience, while terminating more than 146,000 developer accounts over fraud concerns and rejecting another 139,000 developer enrollment attempts.<\/p>\n
Those figures show the scale of malicious activity Apple is attempting to keep outside its ecosystem. They also highlight the stakes when fraudulent financial software gets through.<\/p>\n
For crypto users, where surrendering a single recovery phrase can put an entire wallet beyond recovery, the growing list of impersonators is testing how much confidence Apple’s App Store badge should inspire.<\/p>\n<\/div>\n
Apple\u2019s tightly controlled App Store is facing renewed scrutiny after three Bitcoin holders alleged they lost $1.8 million to a fake crypto wallet, adding to a growing list of malicious wallet apps that have reached users despite the company\u2019s screening process. The lawsuit, filed July 24 in California, accuses Apple of failing to adequately review<\/p>\n","protected":false},"author":1,"featured_media":11215,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[5784,2538,5781,5782,5783,91,1639,2746,2166,1026,5755,4244,159,358,259],"class_list":["post-11214","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-1-8m","tag-app","tag-app-store","tag-apple-bitcoin","tag-apples","tag-bitcoin","tag-developer","tag-fake","tag-promoted","tag-spent","tag-stole","tag-store","tag-wallet","tag-warning","tag-year"],"yoast_head":"\n
Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"A $1.8 million lawsuit says fake crypto wallets slipped through Apple\u2019s App Store, renewing scrutiny of its security controls.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=11214\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them\" \/>\n<meta property=\"og:description\" content=\"A $1.8 million lawsuit says fake crypto wallets slipped through Apple\u2019s App Store, renewing scrutiny of its security controls.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=11214\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-28T18:21:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11214\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=11214\",\"name\":\"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11214#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11214#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg\",\"datePublished\":\"2026-07-28T18:21:05+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"A $1.8 million lawsuit says fake crypto wallets slipped through Apple\u2019s App Store, renewing scrutiny of its security controls.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11214#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=11214\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11214#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11214#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto & Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them - Crypto News: Latest Cryptocurrency News and Analysis","description":"A $1.8 million lawsuit says fake crypto wallets slipped through Apple\u2019s App Store, renewing scrutiny of its security controls.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=11214","og_locale":"en_US","og_type":"article","og_title":"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them","og_description":"A $1.8 million lawsuit says fake crypto wallets slipped through Apple\u2019s App Store, renewing scrutiny of its security controls.","og_url":"https:\/\/cryptonews.uk.com\/?p=11214","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-07-28T18:21:05+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=11214","url":"https:\/\/cryptonews.uk.com\/?p=11214","name":"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=11214#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=11214#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg","datePublished":"2026-07-28T18:21:05+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"A $1.8 million lawsuit says fake crypto wallets slipped through Apple\u2019s App Store, renewing scrutiny of its security controls.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=11214#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=11214"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=11214#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/apple-app-store-fake-crypto-wallet-security-breach.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=11214#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Apple\u2019s App Store promoted fake Bitcoin wallet that stole $1.8M after developer spent a year warning them"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto & Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11214"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11214\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/11215"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"Fake](\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/07\/ios-macos-fake-crypto-apps-01.jpg\")