Apple Sued for $1.8M Over Fake Bitcoin Wallet App on App Store

Scammers Exploit Apple’s App Store to Drain Bitcoin

Three cryptocurrency users have initiated legal action against Apple, claiming the company’s App Store became the vehicle for a $1.8 million Bitcoin theft. The lawsuit centers on a counterfeit version of Sparrow Wallet that successfully deceived users and bypassed Apple’s security measures. According to the court filing obtained by MacRumors, the three plaintiffs—James Ramirez, Christopher Ellis, and Jalen Delgado—each fell victim to the fraudulent app during 2025. Ramirez lost approximately $875,000, Ellis lost $840,000, and Delgado lost $120,000 after entering their seed phrases into what they believed to be the legitimate Sparrow Wallet application. The scammers then used those credentials to transfer the Bitcoin holdings away from the victims.

Alleged Failures in App Review

The complaint, filed in the US District Court for the Northern District of California, contends that Apple neglected its responsibility to properly vet and oversee applications available to iPhone users. Despite charging developers substantial fees and maintaining strict control over which apps appear on its platform, Apple allegedly permitted fake versions of Sparrow Wallet to persist. This isn’t the first time such impostor apps have appeared—Craig Raw, the legitimate Sparrow Wallet developer, has publicly criticized Apple over recurring fake versions of his application. Sparrow Wallet is a genuine, well-regarded Bitcoin wallet available on Windows, macOS, and Linux, but has never had an official iOS release, making Apple’s failure to stop the counterfeits particularly problematic.

Apple’s Limited Response

Apple acknowledged the issue to MacRumors, stating it removed the fraudulent applications and terminated the developer accounts responsible for uploading them. The company emphasized that it maintains systems for users and developers to report violating apps and takes action against those that breach App Store guidelines. However, the lawsuit suggests these mechanisms proved insufficient to prevent the multi-million dollar theft scheme. The case highlights a critical vulnerability in how cryptocurrency users access legitimate tools—scammers exploit the gap between platforms where impostor apps flourish and genuine projects’ inability to maintain a secure presence everywhere users look. This dynamic has long challenged the crypto community, forcing a difficult choice between maintaining strict security and reaching users on popular platforms.

Source: US District Court for the Northern District of California, via Cointelegraph. Not financial advice.