Fake "Trezor Wallet Suite" app on Apple's App Store asks for the recovery phrase
Who is affected
iPhone users looking for a Trezor companion app could install a fake one and lose their funds by typing in their recovery phrase. Trezor devices themselves were not affected.
What happened
In June 2023 Rafael Yakobi of The Crypto Lawyers warned on Twitter that an app called “Trezor Wallet Suite”, not published by Trezor, was available on Apple’s App Store. According to Decrypt and Cointelegraph, he said the app would request the user’s seed phrase, allowing its operators to steal the user’s crypto. Decrypt reports he said the app had been available for weeks.
Cointelegraph reports that Apple removed the app after the warning, but that a search for its name still returned another lookalike, “MyTREZŌR Suite: One Edition”, whose only reviews warned it was a scam. Decrypt notes that Trezor’s official iOS app is Trezor Suite Lite.
Neither outlet obtained a comment from Trezor or Apple. Cointelegraph also recalls a 2021 case in which a user reportedly lost $600,000 in bitcoin after downloading a malicious Trezor app from the App Store.
Cryptocurrency is a digital or virtual currency secured by cryptography, operating on decentralized blockchain networks to enable secure, peer-to-peer transactions.
A mnemonic phrase is a set of words that stores a cryptocurrency wallet's private keys, allowing users to recover access if lost.
Read full definitionTrezor Suite is a software interface for managing Trezor hardware wallets, allowing users to send, receive, and store cryptocurrencies securely.
Read full definitionBitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definitionSources
Independent reporting and research this entry was checked against.
Learn more
Guides on protecting yourself against this type of incident (Targeted phishing) and the glossary terms that describe it.
How to Avoid Phishing Attacks
Phishing is the #1 way people lose crypto. Learn to spot fake emails, websites, and apps before they steal your funds.
Read GuidePhishing Defense: Protecting Your Hardware Wallet from Social Engineering
Fake websites, spoofed emails, malicious dApps — how phishing attacks target hardware wallet users and how to spot them every time.
Read GuideCommon Crypto Scams in 2026
Scammers stole billions in 2024. Learn the latest tactics — phishing, fake apps, social engineering — and how to avoid them.
Read GuidePhishing Attack
A phishing attack tricks crypto users into revealing private keys, seed phrases, or login details via fake emails, websites, or messages mimicking legitimate wallets or exchanges.
Crypto Scam
A Crypto Scam is a fraudulent scheme that tricks people into sending cryptocurrency or sharing private keys for financial gain.
Cite this entry
WalletInsights. “Fake "Trezor Wallet Suite" app on Apple's App Store asks for the recovery phrase”. Hardware wallet security incident tracker. Last verified November 4, 2026. https://walletinsights.io/en/security-incidents/fake-trezor-wallet-suite-ios-app-2023/
Corrections and right of reply
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.
All Trezor incidents
- Suspected implant in a Trezor Safe 5 sold by CryptoBilis
- Breach at shipping provider ShipMonk exposes data of up to 80,689 Trezor customers
- Laser fault injection bypasses firmware checks on Trezor Safe 7's TROPIC01 chip
- Fake Trezor letters demand an "Authentication Check" and the recovery phrase
- Attackers abuse Trezor's support contact form to send phishing emails