List of fake wallets on Google Play, 3 active at the moment!

[Rikafip]

You may want to add this to your list:

Code:

https://play.google.com/store/apps/details?id=io.kodular.yassine_benajem99.MyEtherWallet

and

Code:

https://play.google.com/store/apps/details?id=io.kodular.yassine_benajem99.Trust_Wallet

Thank you for reporting, fake wallets have been added to the list.


One more fake wallet appeared on Google Play, this time its fake TRX wallet. Wallet has been uploaded 2 weeks ago and it already has more than 1,000 downloads. Hopefully no one entered their seed phrase, as that would mean they lost everything they had.

Fake TRX wallet

Code:

https://play.google.com/store/apps/details?id=com.eng.devods.tronwallet

Real TRX wallet

Code:

https://play.google.com/store/apps/details?id=trx.org.freewallet.app

Reminder: always download wallets directly from developers website!

[Rikafip]

Another fake Mew wallet has been added to the list

@Rikafip, I would also like to report a fake MEW on Google Play.
The wrong spelling was the flag that this is fake.

Code:

https://play.google.com/store/apps/details?id=com.speidkslz.elpatrosmpablosxw

Archive: https://archive.is/6H7lh

Two more fake Exodus wallets appeared on Google Play, so now there are at least 20 fake wallets available. Some of them are there for more than a month now, and still no signs that they will be removed anytime soon.

Code:

https://play.google.com/store/apps/details?id=io.myexod2.coom]

Code:

https://play.google.com/store/apps/details?id=io.exdswallc.coom

Please spare few minutes of your time and report those fake wallets and remember to download apps only using developer's website!

[Kong Hey Pakboy]

Since SafePal is prevalent in social media like Twitter because of its airdrop and free giveaways. Someone also created a fake SafePal wallet on Google Play Store, so watch out for Fake Applications and Scam Telegram Groups. However, its phony application is already removed on PlayStore, but we still need to be careful with this kind of scheme.

https://twitter.com/iSafePal/status/1349147361109364738

[mike2077]

How it is even possible that they allowed to be in a store?

[DdmrDdmr]

<...>

According to their Developer Distribution Agreement:

8.3 Google does not undertake an obligation to monitor the Products or their content. If Google becomes aware and determines in its sole discretion that a Product or any portion thereof (a) violates any applicable law; (b) violates this Agreement, applicable policies, or other terms of service, as may be updated by Google from time to time; (c) violates terms of distribution agreements with device manufacturers and Authorized Providers; or (d) creates potential liability for, or may have an adverse impact on, Google or Authorized Providers (for example, if a Product has an adverse economic, reputational or security-related impact); then Google may reject, remove, suspend, limit the visibility of a Product on Google Play, or reclassify the Product from Google Play or from Devices. Google reserves the right to suspend and/or bar any Product and/or Developer from Google Play or from Devices as described in this Section. If Your Product contains elements that could cause serious harm to user devices or data, Google reserves the right to disable the Product or remove it from Devices on which it has been installed. If Your Product is rejected, removed, or suspended from Google Play or from Devices pursuant to this Section 8.3, then Google may withhold payments due to Developer.

https://play.google.com/intl/ALL_uk/about/developer-distribution-agreement.html

And their Content Policy:

We don’t allow apps that mislead users by impersonating someone else (e.g. another developer,  company, entity) or another app.  Don’t imply that your app is related to or authorized by someone that it isn’t.  Be careful not to use app icons, descriptions, titles, or in-app elements that could mislead users about your app’s relationship to someone else or another app.

https://play.google.com/intl/en-GB/about/developer-content-policy/

It seems that they rely pretty much on the above wording to shield themselves from responsibility of product impersonation such as wallet malware clones, and leave it largely to the community to detect and report these cases. Of course, this seems insufficient, and one could imagine a few more procedures that can be set into motion to mitigate these sort of events from happening so easily.

[Baofeng]

If this fake Mycelium wallet been reported or listed already? If not, then kindly add it @Rikafip, thanks for this thread. Archived here.

Code:

https://play.google.com/store/apps/details?id=com.myceliumwallet.smart

[Rikafip]

If this fake Mycelium wallet been reported or listed already? If not, then kindly add it @Rikafip, thanks for this thread. Archived here.

Code:

https://play.google.com/store/apps/details?id=com.myceliumwallet.smart

There is already one fake Mycelium wallet on the list, but the one you discovered is different so I added it to the list and reported.


Two more fake wallets have been identified being available on Google Play.

Fake Atomic wallet

Code:

https://play.google.com/store/apps/details?id=io.myatomwall.starcoomter

Fake Jaxx Liberty wallet

Code:

https://play.google.com/store/apps/details?id=com.linkstore.ss.jaxx

14 fake wallets have been removed by Google in the last couple of days, so at least there is some good news. Their reaction could still be faster though as in a couple of weeks (which is their average response times) chances are good that someone will download the app, enter seed phrase and loose all the money. Please report three newly added fake wallets; it will only take a minute of your time and it might save someone.

[RabbiTANK]

Hmmm, so google playstore team are not removing those fake apps? Finally, that's good to hear, I guess we can only keep fishing the out ourselves and report to the team, I believe they can't do this themselves since they can't even tell the difference

[AAPPKK]

Without some kind of management, the problem of fake wallets will be more serious

[Yamifoud]

As I check almost every day and searching crypto wallets, it was a surprise a lot of options will appear. Even BTC and ETH have no escape from this.
For the growing numbers of fake wallet apps, it should be the time for google play store to regulate it and to know which one is fake or legit. And they should have to removed ASAP or not, even to tag as fake/trusted. 
I'm in consideration with the comments but as we know that some feedbacks been paid and manipulated, that seems not safe by then.

[playyamy]

These things can have a big impact on novices

[Serious475]

Hello Rikafip I want to add on the list some of the fake wallets I found.

Fake electrum

[Fake wallet] Coinbase wallet application

Hopefully, you will notice this.

[Rikafip]

Hello Rikafip I want to add on the list some of the fake wallets I found.

Fake electrum

This fake Electrum wallet seems to be already removed so there is no point adding it now.

[Fake wallet] Coinbase wallet application

One of the reported fake Coinbase wallets is already removed so won't be added but the other one is still available so that on goes on the list!


Google removed four fake wallets in the last day or two, so with this newly identified fake Coinbase wallet there are overall 6  active at the moment.

[Harlot]

How it is even possible that they allowed to be in a store?

Google is notorious for not screening any kind of applications and content on their products from their own app store, Youtube, and their search engine you will see a bunch of malware, phishing sites, and other scams which will make you definitely see at least one especially with their SEO. What's the sad thing about this is they rely on their own customer feedback before they will bring down an app which is one of the worst prevention techniques done by any content providers out there. Literally anyone can upload an app in Google playstore and they won't have any kind of good screening process in it so there is a big chance that they will just re-upload their phishing apps.

[Rikafip]

Literally anyone can upload an app in Google playstore and they won't have any kind of good screening process in it so there is a big chance that they will just re-upload their phishing apps.

It's true that Google sucks in that regard and that there is a lot of room  for improvement but I don't think that they don't check apps at all. Problem is that they don't manually check each and every app made by a new developer. Or at least to manually check an app if there is already similarly named on available on Google Play.

I do like to think that they still block certain amount of phishing attempts, no matter how sucky and fallible their screening process is.

[Baofeng]

This one looks suspicious to me, recently uploaded last January 18.

Code:

https://play.google.com/store/apps/details?id=org.dash.electrum.electrum_dash

So I did try to confirm in their official ANN thread if it is fake or not,

And I got two response saying that it could be fake.

Response 1:here
Response 2:here

So I reported it as well.

[Taskford]

Literally anyone can upload an app in Google playstore and they won't have any kind of good screening process in it so there is a big chance that they will just re-upload their phishing apps.

It's true that Google sucks in that regard and that there is a lot of room  for improvement but I don't think that they don't check apps at all. Problem is that they don't manually check each and every app made by a new developer. Or at least to manually check an app if there is already similarly named on available on Google Play.

I do like to think that they still block certain amount of phishing attempts, no matter how sucky and fallible their screening process is.

There's many fakes recently so I think google should implement a strict listing on their platform since those phising site is so alerting and if they control the apps to be listed for sure phising apps will decrease and provably have possibilities gone on their platform. As of now since they are allowing it since maybe they don't really look on what type of apps has been listed maybe a simple report might give a big help since for sure if those one will get reported the dev will find ways to eliminate those dangerous apps.

[Rikafip]

This one looks suspicious to me, recently uploaded last January 18.

Code:

https://play.google.com/store/apps/details?id=org.dash.electrum.electrum_dash

Someone in the DASH announcement thread checked it with the team and it seems like DashElectrum wallet is legit after all.

I checked with the DASH team.  The app is good. No worries.  

The app is from an external developer, funded by the DASH decentralized budget:

https://www.dashcentral.org/p/DashElectrumJan2021

They will improve in the image of the app announcement to avoid further confusion.

[gadado]

I do wonder how they manage to get such wallets officially in the playstore. Doesn't that require a very official procedure?

[The Sceptical Chymist]

Nicely done on this list, OP.  I have no doubt there are complete newbies to bitcoin who'll get scammed by these fake wallets--and I'm assuming that's why they were created in the first place.  If you're new and don't know what you're looking for (or looking at), it's nearly impossible to tell if something is genuine in the Google Play store unless someone's already dropped a warning feedback or something.

As bitcoin keeps going up, we're going to start seeing more of these creative scamming methods.  This is the aspect of cryptocurrency that I detest:  the space is full of dishonest people and outright scammers.

I do wonder how they manage to get such wallets officially in the playstore. Doesn't that require a very official procedure?

Apparently not if they're getting them listed.  And yeah, you'd think Google would do some due diligence on the apps they distribute, but obviously it's not much if any at all.