Crypto wallet users beware: Delete these malicious apps from your phone now
Which apps are stealing your crypto—and how to stay safe
Published on
:
Updated on
:
Android users with cryptocurrency apps on their phones have been hit with a red alert. A fresh report by Cyble Research and Intelligence Labs (CRIL) reveals a massive phishing operation involving over 20 dangerous apps on the Google Play Store—many of them impersonating trusted crypto wallets. These apps are harvesting 12-word recovery phrases, effectively handing over the keys to users’ DeFi wallets to cybercriminals.
Crypto adoption may be booming, but so are the risks. What makes this scam particularly insidious is how convincing these apps look. From design to functionality, they mirror legitimate platforms. Apps like SushiSwap, PancakeSwap, Raydium, Hyperliquid, and Suiet Wallet are among the dangerous ones identified yet. Once installed, the app prompts users to enter their recovery phrases, often disguised as a “wallet restore” feature. Behind the scenes, this data is routed to malicious actors who can then drain funds in seconds.
A new report flags dangerous crypto wallet scams on the Play Store, tricking users into sharing sensitive recovery phrases
The attack vector is smartly masked. Cybercriminals are reportedly uploading these phishing apps using developer accounts previously associated with unrelated tools—like gaming and video editing software. What’s more, the apps conceal their phishing URLs within their privacy policies, adding a layer of false legitimacy.
Here are some of the identified fake crypto apps you should delete immediately:
As the digital currency space evolves, so does the sophistication of scams. Users must remain vigilant, not just about where they store their assets, but how they access them. The golden rule? If an app asks for your recovery phrase, it’s a red flag—shut it down before it shuts you out.
