Fake Wallet App
A malicious application disguised as a legitimate crypto wallet, designed to steal a victim's funds or seed phrase once they enter it or deposit assets.
A fake wallet app is a malicious application, often distributed through official app stores, third-party download sites, or search engine advertisements, designed to closely imitate a legitimate, well-known crypto wallet's branding and interface. Once installed, it either prompts the victim to enter an existing seed phrase (which it then steals) or generates a wallet address the attacker secretly controls, so that any funds a victim deposits go directly to the attacker rather than into a wallet the victim actually controls.
Fake wallet apps have periodically slipped through official app store review processes by closely mimicking a legitimate wallet's name, icon, and description, making it difficult for a casual user to distinguish the fake from the genuine app without careful verification, such as checking the developer's name against the legitimate wallet provider's official website. Because a fake wallet app can be indistinguishable in appearance from the real one, verifying the download link directly from the legitimate project's official website or documentation is one of the most reliable defenses against installing one by mistake.
Examples
- A fake wallet app closely mimicking a popular legitimate wallet's branding tricked users into entering their seed phrase, which the attacker then used to drain their funds.
- Verifying a wallet app's download link directly from the legitimate project's official website, rather than searching an app store or search engine, is one of the most reliable defenses against installing a fake wallet app.