Fake Wallet Apps Trick Users into Handing Over Seed Phrases

A scammer's fake wallet app is convincing enough to trick even experienced users into handing over their seed phrase. The goal is always the same: get the victim to type in their backup, so the scammers can access their funds.

The problem is not new, but it persists, with multiple campaigns this year already showing that these scams work. According to Lucien Bourdon, Bitcoin Analyst at Trezor, people fall for these scams because they are often sent a fake app that looks exactly like the real one, complete with the same logo and layout.

The urgency is usually created by fear or promise of reward. Scammers may send an email saying your device is vulnerable to a security update, or offer an airdrop in exchange for entering your seed phrase. Even when the method changes, the outcome is always the same: a form asking for the 12-24 word seed phrase.

Bourdon emphasizes that a fake wallet app looks exactly like the real one and can even be convincing enough to fool AI tools into making it look legitimate. The only giveaway is what it asks for: a form with numbered boxes for the seed phrase, which should never be typed into a computer or phone.

The advice differs between hardware and software wallets. For hardware wallets like Trezor, the seed phrase is stored offline in the device itself and never needs to be accessed from a computer or phone. This makes it virtually impossible for scammers to intercept it. Software wallets, on the other hand, run on your computer or phone and require you to type in your seed phrase during recovery.

Bourdon warns that even if an app looks exactly like Trezor Suite, it's a scam if it asks for your seed phrase. The only time you should enter your backup is when you're the one initiating the recovery process, not when someone else contacts you first with an urgent request.