Fake crypto exchange apps impersonate real exchanges to steal your login credentials and deposits. They’re increasingly common on official app stores.
How They Work
| Stage | What Happens |
|---|---|
| 1 | App is published on App Store or Google Play |
| 2 | Named similarly to a real exchange (e.g., “Coinbase Pro Max”) |
| 3 | User downloads and creates an account |
| 4 | User deposits crypto to “start trading” |
| 5 | App shows fake profits and charts |
| 6 | User tries to withdraw — app demands “verification fees” |
| 7 | App disappears or stops responding |
Recent Examples
| Fake App Name | Impersonated | Reported |
|---|---|---|
| Coinbase Pro Max | Coinbase | 2025 |
| Binance Lite | Binance | 2024 |
| Kraken Vault | Kraken | 2025 |
| Crypto.com Wallet Pro | Crypto.com | 2024 |
| MetaMask Plus | MetaMask | 2025 |
How to Spot a Fake
| Check | Real Exchange | Fake Exchange |
|---|---|---|
| Developer name | Official company name | Unknown or misspelled |
| Downloads | 1M+ | Under 10K |
| Reviews | Mostly positive | Mixed or suspicious |
| Release date | Years ago | Days or weeks ago |
| Website | Official URL | Lookalike domain |
| App description | Professional | Hype, poor English |
| Permissions | Minimal | Broad, unnecessary access |
Red Flags in the App
| Red Flag | Why |
|---|---|
| Asks for seed phrase | Real exchanges never do this |
| Slow or no withdrawals | Funds are trapped |
| Constantly changing fees | Arbitrary charges |
| ”Verification fee” to withdraw | It’s a scam |
| Bonus for inviting friends | Ponzi-like structure |
| No 2FA option | Basic security missing |
Why They Appear on Official Stores
Apple and Google review apps, but scammers find ways around:
| Bypass Method | How |
|---|---|
| Initial submission | Legitimate-looking app, updated later |
| Hijacking | Developer account with good apps is compromised |
| Paid reviews | Fake 5-star ratings |
| Short window | App taken down after a few days but damage done |
How to Verify an Exchange App
| Step | Action |
|---|---|
| 1 | Go to the exchange’s official website |
| 2 | Click the “Download App” link |
| 3 | Check the developer name matches |
| 4 | Check the number of downloads |
| 5 | Check release date (should be years old) |
| 6 | Read recent reviews (sort by newest) |
What to Do If You Downloaded a Fake
| Step | Action |
|---|---|
| 1 | Don’t deposit any more crypto |
| 2 | Don’t enter verification details |
| 3 | Delete the app immediately |
| 4 | Change passwords for all other accounts |
| 5 | Scan your device for malware |
| 6 | Report the app to Apple/Google |
| 7 | Report to Action Fraud |
Bottom Line
Fake exchange apps on official app stores are on the rise. Always download exchange apps from the exchange’s official website link. Check developer name, download count, and release date. Never pay a “verification fee” to withdraw funds — that’s the biggest red flag. If an app looks suspicious, check on the real exchange’s Twitter or support page for scam alerts.
What matters most
Every fake exchange app you will ever meet shares the same skeleton, and once you see it the pattern stops being threatening. The app’s real business is never trading — it is collecting deposits, showing you fake charts and rising balances, and then inventing reasons why you cannot take money back out. The “verification fee” is the tell: no legitimate exchange charges you to access funds you already own. Before you deposit anything on a platform you were not already using, ask yourself whether you are paying into an exchange or into a well-branded trap. A genuine exchange makes it easier to move money out, not harder.
What to avoid
The costliest mistakes with fake exchange apps come down to a handful of habits. Downloading from a search result or an ad rather than the exchange’s own website is how most people first encounter a counterfeit; treat any app that appears in sponsored results with suspicion and navigate to the company’s official domain directly. Installing an app that asks for broad permissions — access to your contacts, SMS, or photos — is another alarm, because a trading app has no legitimate reason to touch those. And once an app starts demanding increasingly creative fees to release your balance, resist the instinct to pay “just one more” to free the rest. Every further payment is lost the way the first one was. Real platforms list their fees up front and never condition a withdrawal on an unlocked balance.
Common questions
Q: Can a fake app really get onto the official app store? A: Yes. Review teams on both Apple and Google can be bypassed by submitting a legitimate-looking app and silently updating it later with malicious code, by hijacking a developer account that already had good apps, or by flooding the listing with paid five-star reviews. The app may be removed after a few days, but its work is usually done by then.
Q: What should I check before trusting an exchange app? A: Verify the developer name matches the official company, confirm the download count is in the millions for a major exchange, check that the release date is years old, read the most recent reviews rather than the top ones, and fetch the download link from the exchange’s official website instead of a web search.
Q: Is my deposit really gone if I paid a verification fee? A: Almost certainly. The entire point of the fake app is to keep your money, and the so-called fee is just another layer of it. Transactions on the blockchain are irreversible, so paid funds are extremely unlikely to be recovered. Stop paying, document everything, delete the app, and report it.
Q: How do real exchanges handle withdrawals? A: Real exchanges process withdrawals through scheduled banking, card, or network transfers with fees published in advance and no requirement to “unlock” your own balance. If you are facing a fee that appears out of nowhere in order to withdraw, you are not dealing with a real exchange.
Keeping your funds verifiable
The strongest defence against counterfeit apps is to keep a single, trusted route to every platform you use. Bookmark the official website, install the app from its own download page, and write down the correct developer name and domain in a place you control. Check the address bar and the sender of every email that claims to be from the exchange before you act on it, and remember that a small amount of routine scepticism — a glance at reviews, a check of permissions, a look at the domain — costs seconds and blocks the overwhelming majority of these scams before they ever touch your wallet.