Apple sued after alleged App Store crypto scam cost users $1.8M

The numbers are brutal. One user lost $875,000. Another $840,000. A third $120,000. All three downloaded Sparrow Wallet from the App Store believing Apple's central promise: we review every app so you don't have to. The real Sparrow Bitcoin wallet doesn't exist on iOS. Craig Raw, its creator, has publicly warned that fake versions infest the store. Apple kept hosting them anyway.

This isn't a bug. It's a business model contradiction. Apple has spent years arguing that its exclusive control over iOS distribution is a safety feature, not a monopoly tactic. That argument underpins its resistance to the Digital Markets Act, to Epic's legal assaults, to every regulator asking why users can't choose their own app sources. The company's position is simple: trust us, we're the firewall. The Sparrow Wallet fraud exposes that firewall as marketing copy.

The complaint quotes Apple's own messaging back at it. "As part of a sustained marketing campaign, Apple has positioned itself, its products and services, as offering a level of security and trustworthiness superior to any competing technology company." That language isn't legal boilerplate. It's the foundation of a fraud claim. When a platform sells safety as a premium feature, it assumes a duty of care that "we try our best" doesn't satisfy.

Apple's response is telling. It didn't deny the losses. It cited statistics — 371,000 rejected submissions in 2025 — as if volume excuses the single catastrophic miss. It noted that no Sparrow copycats remain on the store today. That's closure, not accountability. The money is gone. The bitcoin moved to addresses the victims don't control. Apple's 30% cut on every transaction in that fraudulent app? Still collected.

The plaintiffs want a jury trial. They want their money back. They want Apple to warn users that the App Store isn't the fortress the ads claim. That last demand might be the most dangerous for Apple. A court-ordered disclosure that "App Store review does not guarantee app legitimacy" would puncture the narrative Apple has built its ecosystem defense on. It would admit that the walled garden has holes — and that Apple knows it.

Sparrow Wallet isn't an isolated incident. Crypto wallet spoofs have plagued the store for years. Researchers have documented dozens. Apple removes them when flagged, then approves the next variant. The review process catches obvious malware. It struggles with social engineering wrapped in legitimate code. That's a hard technical problem. But Apple doesn't sell "we catch malware." It sells "we protect you from scams."

The distinction matters. Malware exploits code. Scams exploit trust. Apple's review process is built for the first. Its marketing promises the second. The gap between them is where the $1.8 million disappeared.

If the case reaches discovery, Apple's internal review metrics will become evidence. How many human minutes touched Sparrow Wallet before approval? What automated checks ran? Did any reviewer flag the mismatch between the app's name and the official project's platform availability? The answers will either show a system that failed despite rigor — or a system that never really tried to solve this class of problem.

Apple's defenders will say users bear responsibility. Verify the developer. Check the website. Don't send life savings to an app you found in a store. That argument works for open platforms. It collapses when the platform's entire pitch is "you don't need to verify because we did." You can't sell a concierge service then blame the guest for trusting the doorman.

The lawsuit arrives as Apple faces mounting pressure to open iOS. The EU's DMA forces third-party app stores. The US DOJ's antitrust suit targets the same gatekeeper power. Apple's defense has always been security. This case hands critics a concrete example of that security failing at the exact scale Apple claims to prevent.

Three people lost $1.8 million because they believed the sign on the gate. The sign said "Safe." The gatekeeper took a cut. The sign didn't say "We check for malware but not for impersonation." It didn't say "Crypto wallets are high risk." It said "Safe."

A jury will decide whether that sign constituted a promise Apple broke. But the market has already seen the gap. Every developer considering a third-party store now has a data point: Apple's review didn't stop a fake wallet from stealing nearly two million dollars. Every regulator has a exhibits. Every user has a warning.

Apple can fix the process. It can add crypto-specific verification. It can warn users at download time. It can insure high-value transactions. But it can't unreceive the argument that its exclusive control equals user safety. That argument just lost $1.8 million in a Northern California courtroom. The bill comes due in discovery.