PhishingPublished 27 Jul 2026

Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin

Source Bleeping Computer

Description

Three individuals filed a lawsuit against Apple claiming they lost approximately $1.8 million in Bitcoin after downloading a fraudulent Sparrow Wallet app from the Apple App Store. The fake app impersonated the legitimate Sparrow Wallet, which does not have an iOS version, and tricked users into entering their seed phrases, resulting in theft of their cryptocurrency. Despite prior warnings about such fraudulent apps, Apple allegedly failed to adequately monitor and remove these malicious applications. The plaintiffs seek reimbursement, damages, and improvements in Apple's app review and fraud detection processes.

Impact

Victims lost significant amounts of Bitcoin, totaling approximately $1.8 million, due to theft after entering their seed phrases into the fraudulent app. The fraudulent app's presence on the App Store undermined user trust in the platform's security and app review process. The lawsuit alleges Apple’s inadequate monitoring and response contributed to these losses. There is no indication of a software vulnerability or exploit in Apple’s systems; the impact stems from social engineering and fraudulent app distribution.

Defensive guidance

Apple has removed the fraudulent applications and terminated the developer accounts responsible. Users are advised to only download Sparrow Wallet from its official website, as no legitimate iOS version exists. Apple encourages reporting suspected scams via its Report a Problem service and states it takes immediate action on guideline violations. The plaintiffs seek that Apple improve and publicly disclose its procedures for detecting and removing fraudulent apps and introduce warnings about cryptocurrency app risks. No specific software patch is applicable as this is not a software vulnerability.

Summary

The threat involves a fraudulent cryptocurrency wallet app named 'Sparrow Wallet' distributed via the Apple App Store, which impersonates the legitimate desktop-only Sparrow Wallet. Victims were deceived into entering their seed phrases, enabling attackers to transfer Bitcoin to scam-controlled wallets. The legitimate Sparrow Wallet developer had previously reported these fake apps to Apple, but they remained available for over a year. Apple removed the fraudulent apps and terminated associated developer accounts only after multiple reports and public exposure. The lawsuit alleges Apple promoted the fake app in curated collections and failed to respond adequately to reports of fraud.

References

bleepingcomputer.com/news/apple/apple-sued-over-fake-app-store-crypto-wallet-app-stealing-18m-in-bitcoin/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 13 Sep 2026, 18:50 UTC

References

Community reviews