Apple’s tightly managed App Retailer is going through new scrutiny after three Bitcoin holders claimed they misplaced $1.8 million to pretend cryptocurrency wallets. This provides to the rising listing of malicious pockets apps which have reached customers regardless of the corporate’s vetting course of.
The lawsuit, filed July 24 in California, accuses Apple of selling the App Retailer as a secure and trusted software program supply whereas failing to correctly evaluate and take away purposes that impersonate Sparrow Pockets.
The lawsuit follows greater than two-year-old warnings about pretend Sparrow apps and comes months after researchers recognized 26 purposes masquerading as main cryptocurrency manufacturers throughout Apple’s ecosystem.
These incidents add to Apple’s long-standing insistence on sustaining strict controls over software program distribution: Screening purposes earlier than they attain customers supplies larger safety towards fraud and malicious software program.
Sparrow developer warns Apple greater than a yr forward of losses
Apple’s findings on this case are based mostly much less on the fraudulent app’s preliminary look and extra on what Apple allegedly knew earlier than subsequent victims have been harmed.
Sparrow founder Craig Uncooked has been warning of fraudulent exercise on the cellular model of his pockets since early 2024. As a result of Sparrow is a desktop-only product, no sophisticated technical analysis was required to determine the eponymous iPhone app as an impostor.
Nonetheless, the criticism says variants bearing the Sparrow title continued to look within the App Retailer over the subsequent yr.
Jalen Delgado, the primary plaintiff named within the lawsuit, allegedly downloaded one among these apps in Could 2025. After offering the seed phrase, he misplaced simply over 1 BTC, which the criticism says was price about $120,000.
The purported discover to Apple turned extra direct two months later.
James Ramirez stated he misplaced 7.4 BTC (price about $875,000) after utilizing one other Sparrow impersonation on July 25, 2025. He reported each the appliance and the theft to Apple that day.
Christopher Ellis allegedly got here throughout the Sparrow app by way of the App Retailer 9 days later. He entered the restoration phrase and misplaced roughly $840,000 price of crypto property, in response to the criticism.
This sequence of occasions is on the coronary heart of the plaintiffs’ lawsuit. They argue that on the time Mr. Ellis was focused, Apple was not simply coping with the model impersonation that had already been reported. The corporate has reportedly obtained a brand new report linking sure pretend wallets to large-scale Bitcoin theft.
The criticism additional alleges that Apple did extra than simply distribute the app. The platform claims to have ranked Sparrow impersonators and surfaced them inside a group of crypto apps, probably rising the credibility and attain of current software program masquerading as wallets.
In line with the criticism:
“Regardless of a number of reviews to Apple that its App Retailer was internet hosting fraudulent and harmful purposes, Apple did not warn shoppers that spoofed pockets apps, together with the pretend Sparrow software, have been showing on the App Retailer, posing a major danger of theft of cryptocurrencies, seed phrases, non-public keys, pockets credentials, and different delicate account data.”
Apple introduced that it has eliminated the fraudulent Sparrow apps and terminated the developer accounts concerned with them.
The corporate additionally pointed to its reporting channels and stated it’ll take motion if an software is discovered to violate App Retailer guidelines.
However Uncooked’s expertise illustrates the problem reliable builders face in thwarting impersonation.
Final month, Uncooked revealed that it submitted a fundamental iOS itemizing aimed toward informing customers that Sparrow doesn’t have an official cellular model.
Uncooked stated Apple initially handled the submission as probably misleading and warned that developer accounts could possibly be closed, however later reversed course.
This episode provides one other layer to the lawsuit’s claims. Apple reportedly struggled not solely to maintain out impersonators, but in addition to differentiate between real pockets builders and people abusing its model.
Apple’s App Retailer pretend pockets downside extends past Sparrow
The Sparrow dispute is a part of a rising wave of crypto pockets impersonations focusing on Apple customers.
Kaspersky Risk Analysis introduced in April that it had recognized 26 fraudulent purposes that imitated cryptocurrency manufacturers comparable to MetaMask, Ledger, Belief Pockets, Coinbase, TokenPocket, imToken, and Bitpie.
The cybersecurity agency says the marketing campaign has been energetic since not less than the autumn of 2025 and has been linked with some certainty to the attackers behind SparkKitty.
This assault was extra complicated than merely exposing a malicious pockets instantly by way of the App Retailer.
Kaspersky Lab has found that these purposes can redirect victims to phishing pages that resemble Apple’s Market and induce them to put in developer profiles. These profiles could possibly be used to put in Trojanized variations of cryptocurrency wallets exterior of the App Retailer.
As soon as put in, malicious software program targets the credentials that management a consumer’s property.
For decent wallets, the malware monitored the pockets restoration or creation display for the seed phrase. As soon as an attacker obtains these phrases, they are able to take management of the sufferer’s funds.
Chilly pockets customers confronted related social engineering threats. Malicious software program that impersonates the interface related to a {hardware} pockets can persuade victims to offer restoration credentials that ought to by no means be entered into unverified purposes.
The marketing campaign primarily focused customers of Apple’s China App Retailer, and official iOS variations of a number of the spoofed wallets weren’t accessible.
Nonetheless, the US has additionally skilled vital losses associated to pretend pockets software program.
In April, American musician Garrett Dutton, higher often called G. Love, stated he misplaced 5.9 BTC after downloading what he believed to be reliable ledger software program from Apple’s App Retailer.
Mr. Dutton adopted the appliance’s directions and entered his restoration phrase. His Bitcoins, price about $424,000 on the time, have been later transferred.
Blockchain investigator ZachXBT traced the stolen property to a deposit tackle related to cryptocurrency trade KuCoin and quickly frozen the suspect account whereas investigating the incident.
This episode is similar to the allegations on the heart of the Sparrow lawsuit. Customers encountered software program that handed on the identification of a cryptocurrency pockets established by way of Apple’s ecosystem, trusted it, entered restoration credentials, and misplaced management of their property.
Cryptocurrency fraud challenges Apple’s App Retailer safety proposals
The repeated incidents more and more conflict with the best way Apple advertises its management over software program distribution.
Apple describes the App Retailer as a “secure and trusted place” and says purposes endure a evaluate course of aimed toward defending customers from fraud, malware and different safety threats.
This promise has additionally supported Apple’s broader protection of its tightly managed ecosystem.
The corporate claims that permitting limitless sideloading may weaken system privateness and safety protections, whereas its centralized evaluate course of permits probably harmful software program to be intercepted earlier than it reaches prospects.
Crypto wallets create a very tough check for that mannequin as a result of an software doesn’t essentially require subtle malware to trigger irreversible loss.
Convincing imitation is sufficient.
A seed phrase sometimes controls the property related to a self-custodial pockets. As soon as a consumer enters these phrases into malicious software program, the attacker can switch property to an tackle managed by the attacker, bypassing the financial institution or fee processor who can reverse the transaction.
For crypto customers, the legitimacy conveyed by app marketplaces is due to this fact notably essential.
The Sparrow plaintiffs argue that Apple’s personal representations led them to consider that the software program distributed by way of the App Retailer was adequately vetted. They’re looking for reimbursement of stolen property, together with compensatory and punitive damages, restitution and authorized prices.
It additionally calls on Apple to enhance and publish procedures for detecting fraudulent purposes and introduce warnings in regards to the dangers related to crypto apps.
Whether or not Apple bears authorized legal responsibility for the losses is unresolved, and the corporate could problem each the plaintiffs’ reliance on the corporate’s safety representations and the plaintiffs’ resolution to enter delicate restoration credentials into third-party software program.
Apple additionally factors to the dimensions of threats its evaluate course of is already stopping.
The corporate introduced final yr that the App Retailer blocked greater than $9 billion in potential fraudulent transactions from 2020 to 2024, together with greater than $2 billion in transactions in 2024 alone.
Apple introduced that in 2024, it’ll reject almost 2 million app purposes that do not meet safety, reliability, and consumer expertise requirements, whereas suspending greater than 146,000 developer accounts and rejecting a further 139,000 developer registration makes an attempt as a result of fraud considerations.
These numbers exhibit the dimensions of malicious exercise that Apple is attempting to maintain out of its ecosystem. It additionally highlights the risks of compromised monetary software program.
For cryptocurrency customers, abandoning a single restoration phrase could make their whole pockets unrecoverable, so a rising listing of imposters is testing simply how a lot belief Apple’s App Retailer badge can encourage.