Fake LocalBitcoins Android App is Phishing For Bitcoins

A fake LocalBitcoins app is being distributed on the Google Play store in a bid to steal user bitcoins.

AccessTimeIconNov 5, 2015 at 4:27 p.m. UTC
Updated Sep 11, 2021 at 11:58 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

UPDATE (7th November 05:19 BST): The fraudulent LocalBitcoins app has been removed from the Google Play app store.


LBC
LBC

A fake LocalBitcoins app is being distributed on the Google Play store in a bid to steal user bitcoins.

The Helsinki-based bitcoin exchange said that it has reached out to the app store to have the fraudulent app removed. LocalBitcoins staff said earlier today that upon download the fake app seeks “to get access to your account by having you activate HMAC authentication for your account”.

Five reviewers on the Google Play store posted claims that their bitcoins had been stolen as a result of downloading the app.

LBC2
LBC2

Kangas said in an email that at this time he “cannot comment whether this phishing app has resulted in stolen bitcoins”, adding:

“At the app page it shows that the app has 10 downloads (from which at least part are purchased downloads and reviews), which indicates that most of the people are aware enough, to not install these suspicious looking apps. We are working to get these completely disabled from app store.”

The app was last updated on 28th October and has been downloaded between 10 and 50 times, according to the store page. An email attributed to the developers as well as the website associated with that email were not working at press time.

Google did not immediately respond to a request for comment.

Image via Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.