Crypto Alert: Fake Ledger App Drains Millions Across BTC, Tron, Solana

A fake Ledger app reportedly stole $9.5M in crypto across Bitcoin, Tron, and Solana. Discover how the scam worked and how to stay safe.

NEW YORK, April 15, 2026 — You open the Apple App Store, search for Ledger Live, see an app that looks completely legit with decent ratings, download it, and then it asks you to enter your 24-word recovery phrase to “connect your hardware wallet.” You type it in. Ten minutes later, your entire crypto portfolio is gone.

That exact nightmare played out for more than 50 people last week.

Blockchain investigator ZachXBT broke the news on Tuesday in a Telegram post. A fraudulent Ledger Live app had slipped onto the official Apple App Store and stole roughly $9.5 million in cryptocurrency between April 7 and April 13. The victims lost money across Bitcoin, Tron, Solana, Ripple, and multiple EVM networks.

Apple has since removed the fake app, but not before the thieves cleaned out wallets worth millions.

The losses were brutal for some. Three victims alone lost seven-figure amounts. One was hit for $3.23 million in USDT. Another lost $2.079 million in USDC. A third watched $1.95 million disappear — that included 20.64 BTC, 211 stETH, and 70 ETH. These aren’t small sums. For many, it was life savings or retirement money wiped out in days.

How the Scam Actually Worked

The fake app was designed to look identical to the real Ledger Live. Once installed, it prompted users to enter their 24-word seed phrase. The moment they did, the scammers gained complete control of the wallets and started transferring everything out.

ZachXBT tracked the stolen funds and discovered they were quickly routed through more than 150 different KuCoin deposit addresses. Those addresses were tied to AudiA6, a centralized mixing service that charges high fees to launder stolen crypto and make it harder to trace.

The investigator also pointed out that KuCoin has been seeing a noticeable increase in shady money flows over the past year. In a separate case he worked on, he followed about 54 BTC — worth roughly $3.7 million — stolen from Bitcoin Depot landing in KuCoin wallets too.

This Keeps Happening

Just a few days earlier, on April 12, American musician Garrett Dutton — better known as G. Love — publicly said he lost 5.9 BTC after typing his recovery phrase into a similar fake Ledger app. He called it part of his retirement fund. Stories like his show how even people who are normally careful can get caught when the app looks so real.

Ledger has been warning users about this exact problem for a while. The company keeps saying the same thing: only download their wallet software from the official Ledger website. Never trust app stores for it.

Ledger’s Straight Talk

Ledger’s Chief Technology Officer, Charles Guillemet, was very direct when he spoke about these scams:

“Ledger will never ask for your 24 words. If anyone, or any app, is asking for your 24 words, assume something is wrong.”

He explained that the only real protection is keeping your private keys on a dedicated hardware device with a secure screen, like a genuine Ledger wallet. Never enter your seed phrase into any app or website. That one rule is what actually keeps your money safe.

Guillemet’s message is simple and serious: Your 24-word recovery phrase is the master key to everything. Treat it like cash you would never hand over to a stranger.

Where the Money Went

After the drains, the stolen crypto didn’t sit still. It moved fast through those 150+ KuCoin deposit addresses linked to the AudiA6 mixer. ZachXBT described AudiA6 as a service criminals use to clean illicit funds for steep fees.

KuCoin itself is under growing pressure. In January 2025, the Seychelles-based exchange paid more than $300 million in fines to the U.S. government to settle Anti-Money Laundering charges. Then in February 2026, Austrian regulators banned KuCoin from onboarding any new users from the European Union — even though the exchange had just received its MiCA license a few months earlier in November 2025.

These regulatory problems show how difficult it is for exchanges to spot and stop large suspicious inflows, especially when the money comes in through so many different addresses in such a short time.

Why This Should Worry Every Crypto User

Most people trust the Apple App Store. They think if an app is listed there, it must be safe and properly checked. But this case proves that even big platforms can miss well-made fakes, especially when scammers put real effort into copying the real app perfectly.

The fact that it happened so quickly — over just one week and hitting more than 50 victims — shows how fast these attacks can spread once the fake app goes live.

For regular people holding crypto, the takeaway is pretty clear:

• Always download wallet apps only from the official website, never from app stores if possible.
• Never type your 24-word seed phrase into any software or website.
• Use hardware wallets the right way and keep your keys offline.
• If an app suddenly asks for your recovery phrase, close it immediately.

What You Should Do Right Now

If you use Ledger or any hardware wallet, here’s what makes sense:

1. Delete any Ledger Live app you got from the App Store.
2. Download the official version only from ledger.com.
3. Never enter your seed phrase anywhere except on your actual hardware device.
4. Check app names, developer details, and reviews very carefully before installing anything crypto-related.
5. Keep the majority of your holdings on hardware and only small amounts on phone or computer for daily spending.

Apple taking down the fake app helps stop new victims, but it doesn’t recover the money already stolen. Once funds hit mixers and move across exchanges, getting anything back is extremely tough.

ZachXBT is still following the stolen assets, but tracing mixed crypto is slow and often doesn’t lead to full recovery.

The Bottom Line

This $9.5 million theft in just seven days is another loud reminder that scammers are getting smarter and bolder. They use trusted brand names like Ledger and trusted platforms like the Apple App Store to trick people.

The technology around crypto is advancing fast, but so are the people trying to steal it. The best defense is still the simplest one: stay paranoid about your seed phrase, verify every download, and never let convenience beat security.

Ledger said it best — if anything asks for your 24 words, walk away. Your private keys should stay private, and the only safe place for them is on a hardware wallet you control completely.

Be careful out there. One wrong download can cost you everything.