Fake LocalBitcoins Android App is Phishing For Bitcoins

UPDATE (7th November 05:19 BST): The fraudulent LocalBitcoins app has been removed from the Google Play app store.

A fake LocalBitcoins app is being distributed on the Google Play store in a bid to steal user bitcoins.

The Helsinki-based bitcoin exchange said that it has reached out to the app store to have the fraudulent app removed. LocalBitcoins staff said earlier today that upon download the fake app seeks “to get access to your account by having you activate HMAC authentication for your account”.

Five reviewers on the Google Play store posted claims that their bitcoins had been stolen as a result of downloading the app.

Kangas said in an email that at this time he “cannot comment whether this phishing app has resulted in stolen bitcoins”, adding:

“At the app page it shows that the app has 10 downloads (from which at least part are purchased downloads and reviews), which indicates that most of the people are aware enough, to not install these suspicious looking apps. We are working to get these completely disabled from app store.”

The app was last updated on 28th October and has been downloaded between 10 and 50 times, according to the store page. An email attributed to the developers as well as the website associated with that email were not working at press time.

Google did not immediately respond to a request for comment.

Image via Shutterstock

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Stan Higgins

Learn more about Consensus 2024, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.