Security Current Affairs

Apple's App Store Gets Sued as Fake Wallets Keep Draining Bitcoin from the People Who Actually Trusted It

2026-07-29

Three plaintiffs are suing Apple in California federal court (filed Friday, July 24, 2026) over something Apple has promised for years: that its App Store is safe. The lawsuit centres on fake Sparrow Wallet apps that collectively stole nearly $1.8 million in bitcoin. The App Store, it turns out, wasn't safe. At all.

Here's what happened. Jalen Delgado downloaded a counterfeit Sparrow app in May 2025, handed over his seed phrase, and lost just over 1 BTC—about $120,000 at the time. James Ramirez lost 7.4 BTC (roughly $875,000) to another imposter Sparrow app in July. Christopher Ellis encountered yet another fake Sparrow on the App Store nine days later and lost crypto assets worth approximately $840,000. All three victims reported the fraud to Apple. All three got ruined.

The timing is the poisonous bit. Sparrow Wallet's developer, Craig Raw, has been flagging these fakes since early 2024. Since 2023, more than a dozen imposter Sparrow apps have appeared on the App Store—as recently as April 2026. Users contacted Raw in tears, having lost their life savings to these apps. Apple knew about it. Raw even tried to help by submitting his own placeholder app to warn iOS users that Sparrow doesn't exist there. Apple initially flagged his developer account for doing it, then reversed course. The imposter apps kept showing up anyway. Apple ranked them in search results. Apple featured them in curated crypto collections.

The legal claim is straightforward: Apple violated California's Consumers Legal Remedies Act by failing to review and monitor the apps it distributes, despite marketing the App Store as "a safe and trusted place to discover and download apps." That marketing directly influenced these victims' decision to trust what they found there.

This is not an isolated incident. Kaspersky researchers found 26 fraudulent cryptocurrency wallet apps on Apple's App Store, all designed to drain funds. The fakes mimic MetaMask, Coinbase, Ledger, and Trust Wallet. The campaign has been running since at least autumn 2025, attributed to threat actors called SparkKitty. Once opened, these apps redirect victims to phishing pages that trick them into installing trojaned software.

One higher-profile victim makes this real. Garrett Dutton, the musician known professionally as G. Love of G. Love & Special Sauce, downloaded a fraudulent app from Apple's Mac App Store on 11 April 2026. He lost his entire Bitcoin retirement fund—5.9 BTC, worth approximately $424,175 at the time. Nearly a decade of accumulated savings. Gone. Blockchain data shows those coins moved to deposit addresses at KuCoin shortly after.

The problem isn't mysterious. Crypto wallets are uniquely destructive targets. There's no undo button. Once you give your seed phrase to an attacker, it's over. The FBI reported in April 2026 that Americans lost more than $11 billion to cryptocurrency fraud during 2025, with investment scams accounting for the largest chunk. Federal authorities keep warning that this is one of the fastest-growing forms of financial crime.

Apple claims it removed the imposter apps and terminated developer accounts. But the plaintiffs allege that when victims reported the fraud directly, Apple often did nothing, and that other fake Sparrow apps remain in the App Store. They're seeking reimbursement and better procedures—and public warnings about cryptocurrency apps.

A corporation spent decades telling you it had the safest app store in the world. Now three people are proving it didn't, at a cost of $1.8 million.

Source & further reading:

Sources