Fake exchange & wallet app scams: how they work and what to do
Fake exchange and wallet apps are counterfeit versions of trusted crypto apps โ built to capture your login, your seed phrase, or your deposits.
If this happened to you, it is not your fault. These clones can be nearly identical to the real thing. Here's how they work โ and what to do now.
What is a fake exchange or wallet app?
It's a look-alike of a real exchange or wallet โ a cloned website, a counterfeit mobile app, a malicious browser extension, or an entirely made-up "exchange." The goal is to get you to log in, enter your recovery phrase, or deposit funds, so the scammer can take everything.
How the scam unfolds
- 1.You're sent to it. A link, a QR code, a search ad, or a "support agent" tells you to download an app or visit a site.
- 2.It looks identical. Same logo, colors, and layout as the real brand โ sometimes even on an app store.
- 3.It harvests your secrets. You enter your password, 2FA, or your seed phrase โ or you deposit crypto to "activate" the account.
- 4.Your funds vanish. The scammer uses your details to drain the real account, or simply keeps your deposit. Withdrawals never work.
Warning signs
- ๐ฉYou were told to install the app from a link, QR code, or APK file instead of finding it yourself in the official store.
- ๐ฉIt asks for your seed phrase or private key โ no legitimate app ever does.
- ๐ฉThe web address is slightly off (extra letters, wrong spelling, odd domain ending).
- ๐ฉA brand-new app with few or suspiciously perfect reviews.
- ๐ฉ"Support" contacted you first and walked you through installing it.
- ๐ฉBonuses promised for depositing quickly.
If you entered your seed phrase or login โ do this first
- โขAssume the wallet is compromised. Generate a brand-new wallet (new seed phrase, created offline) and move any remaining funds there immediately.
- โขRevoke token approvals at revoke.cash, then uninstall the fake app and run a malware scan.
- โขFrom a clean device, change your real exchange password and turn on app- or hardware-key 2FA.
- โขScreenshot the fake app/site, its address, and all transactions before they disappear.
How to report it
- โขYour local police โ file an official report and keep the reference number.
- โขYour national fraud body (see the full reporting directory).
- โขReport the fake app to the app store and to the real brand being impersonated.
- โขReport the scam wallet address on Chainabuse.
โ ๏ธ Beware the second scam
"Recovery experts" may contact you promising to get your money back for a fee. The majority are scammers targeting victims a second time. Never pay anyone who guarantees recovery or asks for an upfront fee. Read the red flags โ
You're not alone
Counterfeit apps are deliberately built to be indistinguishable from the real ones. Being fooled by a convincing fake is not carelessness. Reach out to someone you trust and consider a moderated victim community for support.
Get your personalized next steps
Answer 4 quick questions and get a tailored checklist, the right reporting links, and a ready-to-use evidence summary. Nothing is saved.
Start the action plan