Fake Crypto Apps, Wallets and Malware to Avoid

How fake crypto apps and malware work

Some scams send victims to fake crypto apps, including apps distributed as 'beta tests' that skip normal app store review, or even apps offered in well-known app stores. Others use search ads and lookalike websites to trick people into downloading fake wallet or trading software that contains malware. The malware can steal passwords and wallet data, while fake investment apps simply show made-up balances. Crypto businesses and their staff have also been targeted with fake job offers and 'coding tests' that install malware.

Warning signs of a fake crypto app

Someone you met online asks you to install a specific trading app or a beta-test link.
An app or download reached through a search ad or a link rather than the official site.
App listings with spelling errors, vague descriptions, few reviews, or an unknown developer.
Requests for broad device permissions that the app should not need.
Your device slows down, drains battery, or shows pop-ups after installing something new.
A recruiter asks you to run code or install software as part of an interview.

How to avoid fake apps and malware

Download wallets and exchange apps only from links on the company's official website.
Never install apps or beta tests sent by people you met online.
Check the developer name and reviews before installing.
Keep devices and software updated and limit app permissions.
Businesses should restrict running unknown code on company devices and verify recruiters and contacts through separate channels.
Be equally careful with browser add-ons and extensions that ask for access to wallet sites.

Installed a fake app? What to do now

Disconnect the device, and from a clean device move remaining crypto to a new wallet with a new recovery phrase.
Change passwords for email, exchanges, and banks from a clean device, and have the infected device checked or reset.
Preserve evidence before anything disappears: screenshots of chats, profiles, websites and app screens, plus receipts, emails, and a written timeline. Do not delete conversations or the app. Record the app name, developer, download link, and transactions.
Report it to the FBI at ic3.gov and to the FTC at reportfraud.ftc.gov, even if the amount is small. Include wallet addresses, transaction IDs (hashes), amounts, dates, and every website, app, username, and phone number involved. See /guidance/report-crypto-theft-fbi-ic3.
Follow /guidance/crypto-stolen-first-72-hours for wallet thefts.
Watch for recovery scams. Anyone who contacts you offering to get your crypto back for an upfront fee, or who claims to work with the FBI or IC3, is likely a scammer. IC3 says it will never ask for payment to recover lost funds or refer you to a company that does. See /guidance/can-stolen-crypto-be-traced.

Fake apps and malware: common questions

How do I know a crypto app is real?

Download wallet and exchange apps only through links on the company’s official website, and check the developer name and reviews before installing. Apps reached through search ads, links from strangers or “beta test” invitations are the risky ones.

Someone I met online asked me to install a trading app. Should I?

No. Never install apps or beta tests sent by people you met online. Fake investment apps show made-up balances: see fake trading platforms.

I think I installed malware. Are my funds safe?

Assume the device is compromised. From a clean device, move remaining crypto to a new wallet with a new recovery phrase, change your email, exchange and bank passwords, and have the infected device checked or reset.

A recruiter asked me to run code or install software for an interview. Is that normal?

Be very careful. Fake job offers and “coding tests” have been used to install malware on crypto workers’ devices. Verify the recruiter through a separate channel and don’t run unknown code on a device that holds your wallets.

Request a case review

This guide is general information, not legal or financial advice. ChainWatch is not a law firm and does not guarantee fund recovery.

Sources

The information on this page was checked against the sources listed in September 2026. Laws, agency guidance, company policies and contact details change, so please verify the current information with the original source before you act.