Signal

Fake Ledger app on Apple Store steals $9.5 million from crypto users including musician G. Love

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-04-14 06:05 UTCUpdated 2026-04-14 21:35 UTC
redditrsstelegram
cryptoexchangessecuritywalletsapplescams
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
Overview

A counterfeit Ledger Live app on Apple's Mac App Store deceived over 50 users, resulting in the theft of approximately $9.5 million in cryptocurrencies including Bitcoin, Ethereum, Solana, Tron, and XRP.

Entities
AppleLedgerLedger LiveG. LoveBTCETHSOLTRX
Score total
2.28
Momentum 24h
7
Posts
7
Origins
6
Source types
3
Duplicate ratio
14%
Why now
  • The scam was active recently, with thefts occurring between April 7 and 14, 2026.
  • Victims include notable individuals like musician G. Love, drawing public attention.
  • The incident exposes ongoing risks despite established app store review processes.
Why it matters
  • Highlights vulnerabilities in app store security affecting crypto wallet users.
  • Demonstrates risks of seed phrase exposure leading to irreversible crypto theft.
  • Raises concerns about user protection in mainstream app ecosystems.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • Fake Ledger Live app on Apple’s Mac App Store stole over $9 million from more than 50 crypto users.
  • Victims were tricked into revealing their seed phrases, enabling hackers to access and drain their wallets.
How sources frame it
  • Decrypt: neutral
  • Cointelegraph: neutral
  • Gizmodo: neutral
This case underscores the critical need for vigilance when downloading crypto wallet apps, even from trusted platforms like Apple's App Store.
All evidence
Show filters & breakdown
Posts loaded: 0Publishers: 6Origin domains: 6Duplicates: -
Showing 6 / 0
Top publishers (this list)
  • Crypto.News (1)
  • DecryptNews (1)
  • Cointelegraph (1)
  • the_block_crypto (1)
  • cybersecurity (1)
  • CryptoMarkets (1)
Top origin domains (this list)
  • crypto.news (1)
  • decrypt.co (1)
  • cointelegraph.com (1)
  • theblock.co (1)
  • gizmodo.com (1)
  • inbitcoinwetrust.substack.com (1)