There's a special kind of cruelty in a scam that borrows the name of Wasabi Wallet, a tool built entirely around protecting your privacy and your funds.
This week, that's exactly what happened. A fake version of Wasabi Wallet made it onto the Apple App Store, and at least one victim on X says it cost them 6 BTC, worth well over half a million dollars at current prices.
What makes this genuinely alarming isn't just the loss itself, it's that Wasabi Wallet has never had a mobile app to begin with, and the company that built it has said so plainly.
Wasabi Wallet, developed by zkSNACKs, is an open-source, non-custodial Bitcoin wallet built specifically around privacy features like Tor routing and CoinJoin transactions, and it has always been a desktop-only application for Windows, macOS, and Linux. That's not a minor technical footnote, it's a foundational fact any real user of the wallet would already know. You can confirm this directly through the project's official website here: https://wasabiwallet.io.
Despite that, an app calling itself "Wasabi Bitcoin & Crypto Wallet" and falsely attributing itself to zkSNACKs appeared on the Apple App Store, complete with a description promising secure, easy-to-use wallet management. Multiple App Store reviewers flagged it directly, with one writing plainly that zkSNACKs is not the company behind the real Wasabi Wallet and urging others to check the official website before downloading. You can see the listing, and the warnings buried inside its own reviews, directly here: Wasabi Bitcoin & Crypto Wallet — Apple App Store.
I think it's worth walking through the mechanics here, because the appeal of these scams isn't sophistication, it's patience. Fake wallet apps typically work through two primary methods:
Either path ends the same way: the moment a recovery phrase touches an internet-connected app controlled by someone else, every asset tied to that phrase becomes accessible to the attacker instantly, and irreversibly.
For a victim losing 6 BTC, that's not a slow bleed, it's a single moment of misplaced trust turning into a total loss with no possibility of a chargeback, a dispute process, or a bank to call. That's precisely what makes wallet drainers so devastating compared to almost any other category of online fraud.
Here's what I think deserves the most attention in this story: the fake Wasabi app isn't an isolated incident, it's reportedly the 27th wallet clone to reach the App Store this year alone. That's a staggering cadence for anyone who assumed Apple's review process functioned as a meaningful filter against this exact category of fraud.
The largest confirmed case so far remains a fake Ledger app that made it through Apple's review process and drained victims of more than $9.3 million combined before it was caught. That case became the center of an ongoing lawsuit, with plaintiffs alleging Apple continued hosting fraudulent wallet apps even after receiving direct theft reports, in some cases allowing a second victim to lose funds to the same app days after the first report was filed. Kaspersky's own threat research team separately identified 26 fraudulent crypto wallet apps circulating on Apple's App Store earlier this year, using techniques like malicious library injection and fake App Store phishing pages to steal recovery phrases directly, a pattern strikingly consistent with what appears to have happened here.
I don't think this is really a mystery so much as an uncomfortable structural reality. App store review processes were built primarily to catch malware behavior and policy violations, not to verify whether a financial app's stated developer actually owns the brand it claims to represent. A scammer doesn't need sophisticated code to pass review, they need a convincing icon, a plausible description, and enough patience to wait out the review queue.
Once approved, these apps often sit quietly for weeks gathering downloads before the first victim reports match up to reveal the pattern, and by that point, the damage compounds with every additional install. That gap between "approved" and "removed" is where nearly every dollar in these cases gets lost.
Given how consistently this keeps happening, I think the defense here has to be treated as a personal habit rather than something you can outsource to app store trust:
The uncomfortable truth is that no amount of individual caution fully closes this gap while app stores keep approving impersonator apps in the first place. But until that changes, treating every mobile wallet app as guilty until independently verified against the official source is, unfortunately, the only reliable defense available right now.
Disclosure: This is not trading or investment advice. Always do your research before buying any cryptocurrency or investing in any services. Follow us on X @nulltxnews
