Fake Ledger Live app in the Microsoft Store
Who is affected
Windows users who installed the fake app from the Microsoft Store lost about $768,000–$770,000 in total, according to press reports citing ZachXBT.
What happened
A fake Ledger Live application, published as “Ledger Live Web3”, was available in the Microsoft Store. According to ESET, citing BleepingComputer, it had been listed since 19 October 2023. Bitdefender reports that the scammer had modified the open-source Ledger Live software before submitting it to the store.
On 5 November 2023 the on-chain investigator ZachXBT alerted the community that users who had installed the app had lost funds. CoinDesk reports that the attacker’s address received 38 inbound Bitcoin transactions between 24 October and 5 November and then split the funds across many wallets.
Microsoft removed the app on 5 November 2023, the day it was flagged, according to ESET. CoinDesk reported that it remained unclear how the app had been approved. The sources do not report a statement from Ledger on this campaign; Bitdefender notes that Ledger advises downloading Ledger Live directly from Ledger and verifying the installer’s hash against the one Ledger publishes.
Ledger Live is a software application that manages cryptocurrency assets and interacts with Ledger hardware wallets for secure transactions and portfolio management.
Read full definitionBitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definitionSources
Independent reporting and research this entry was checked against.
Learn more
Guides on protecting yourself against this type of incident (Targeted phishing) and the glossary terms that describe it.
How to Avoid Phishing Attacks
Phishing is the #1 way people lose crypto. Learn to spot fake emails, websites, and apps before they steal your funds.
Read GuidePhishing Defense: Protecting Your Hardware Wallet from Social Engineering
Fake websites, spoofed emails, malicious dApps — how phishing attacks target hardware wallet users and how to spot them every time.
Read GuideCommon Crypto Scams in 2026
Scammers stole billions in 2024. Learn the latest tactics — phishing, fake apps, social engineering — and how to avoid them.
Read GuidePhishing Attack
A phishing attack tricks crypto users into revealing private keys, seed phrases, or login details via fake emails, websites, or messages mimicking legitimate wallets or exchanges.
Crypto Scam
A Crypto Scam is a fraudulent scheme that tricks people into sending cryptocurrency or sharing private keys for financial gain.
Cite this entry
WalletInsights. “Fake Ledger Live app in the Microsoft Store”. Hardware wallet security incident tracker. Last verified November 3, 2026. https://walletinsights.io/en/security-incidents/fake-ledger-live-microsoft-store-2023/
Corrections and right of reply
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.
All Ledger incidents
- Hardware implants in Ledger devices sold by CryptoBilis
- Ledger Ethereum app clear-signing bypass hid all but one operation of a large batch
- Ledger Ethereum app swap flow could sign a token approval in place of a payment
- Ledger Secure SDK flaw let a host change transaction details after on-screen review
- Ledger Monero app exposed Keccak state, letting a compromised host recover spend keys