Three users have filed a lawsuit against Apple, claiming they collectively lost more than $1.8 million after downloading what turned out to be a fraudulent cryptocurrency wallet from the App Store. The case cuts to the heart of one of Apple's most commercially and legally significant arguments: that its rigorous app review process justifies both its tight platform control and its commission structure.
What Allegedly Happened
The plaintiffs say they discovered and downloaded a crypto wallet app through the App Store — trusting Apple's review process as a signal of legitimacy — only to find that the app was designed to steal funds. The specifics of how the scam operated haven't been fully detailed in public filings yet, but so-called "pig butchering" and fake wallet schemes have become increasingly common vectors for large-scale crypto theft.
The combined losses of $1.8 million across just three users underscore how financially devastating a single fraudulent app can be, particularly in the crypto space where transactions are largely irreversible.
Why Apple's Review Process Is Central to the Case
Apple has long marketed the App Store's review process as a meaningful security layer — one that justifies why iOS devices can only install apps through Apple's official channel. This argument has been central to its defense in antitrust proceedings, including the Epic v. Apple litigation, where Apple repeatedly cited user safety as a rationale for its closed ecosystem.
If courts find that Apple's review process failed to catch a sophisticated scam that caused nearly $2 million in user losses, that narrative becomes considerably harder to sustain — both legally and in the court of public opinion.
A Pattern, Not an Isolated Incident
This isn't Apple's first brush with fraudulent crypto apps. Over the past several years, researchers and journalists have documented multiple cases of fake wallets, phishing apps, and scam exchanges making it through App Store review — sometimes briefly, sometimes for extended periods.
- 2021: Researchers flagged a fake Trezor hardware wallet app that stole user seed phrases
- 2023: Multiple reports surfaced of fake DeFi apps passing initial review before being removed
- The FBI and FTC have both issued warnings about crypto scam apps targeting mobile users specifically
Apple does remove fraudulent apps when flagged, but the question the lawsuit raises is whether removal after the fact is sufficient when the damage is already done.
Implications for Founders and Marketers
For crypto and fintech founders, this case is a signal that regulatory and legal scrutiny of app distribution is intensifying. A few takeaways:
- Trust signals matter more than ever. If your app operates in a high-risk category like crypto or finance, users need explicit reassurance that they're downloading from a legitimate source — App Store presence alone is no longer enough.
- Platform liability is becoming a live issue. Depending on how this case develops, Apple may face pressure to implement more stringent verification for financial apps, which could raise the bar for legitimate developers too.
- User education is a product feature. Founders in crypto should consider building in-app onboarding that helps users identify official app versions, given how easily bad actors can mimic legitimate wallet UIs.
What Comes Next
The lawsuit is in early stages and Apple has not yet issued a formal public response. However, the timing is significant — Apple is already navigating increased regulatory pressure in the EU under the Digital Markets Act, which has forced it to allow alternative app distribution on iOS in Europe.
If Apple is found liable, it could accelerate calls for greater platform accountability globally. At minimum, it adds another data point to the growing body of evidence that curation at scale is genuinely difficult — and that "we reviewed it" may not be a sufficient legal or ethical defense.



