Apple, the company that for years boasted having the safest app store on the market, now has to defend itself in court for an issue that hits that reputation, three iPhone users accuse it of negligence after collectively losing more than $1.8 million in Bitcoin due to a fake app that circulated for months in the App Store.

The lawsuit was filed on July 24, 2026 before the Northern District Court of California and the names of the plaintiffs are already public James Ramírez, Christopher Ellis and Jalen Delgado. Between May and August 2025, the three downloaded an app called Sparrow Wallet, convinced it was legitimate, but in reality it was a copy designed exclusively to empty cryptocurrency wallets.

How the crypto scam worked

The mechanics of the fraud were as simple as they were effective and that is why it is so worrying. The scammers replicated the interface of Sparrow Wallet, a real Bitcoin wallet, and uploaded a cloned version to the App Store posing as the official app. Once victims entered their sensitive data, the funds ended up in private wallets controlled by the criminals, without any possibility of traceability or recovery.

Ramirez lost about $875,000, Ellis about $840,000, and Delgado about $120,000, all in Bitcoin transferred directly into the hands of the scammers. The most serious thing is that this was not a fleeting app that disappeared quickly, since Craig Raw himself, the original creator of Sparrow Wallet, had publicly warned since 2024 that there were false versions circulating in the store despite multiple complaints filed with Apple. Raw even reported that when he tried to upload a placeholder app to alert users about the fraud, his developer account ended up suspended, although the decision was later reversed.

The legal strategy against Apple

This is where the lawsuit gets interesting, because it is not just about pointing out that there was a malicious app but about arguing that Apple built an entire marketing discourse based on security and exclusive control of its ecosystem for more than a decade. The plaintiffs maintain that this promise of rigorous review and user protection ended up being, in practice, insufficient to detect and eliminate fraudulent applications that had already been reported in time.

The legal basis is that Apple would have violated the California Consumer Legal Remedies Act and other user protection regulations by not adequately reviewing or monitoring what is distributed within its own store. Apple, for its part, declined to comment directly on the case, but defended its systems and assured that apps that imitate others violate its internal policies and that the company acts quickly to eliminate them. The firm even cited its own figures showing that in 2025 it rejected more than 371,000 applications for being copies, spam or attempts at deception.

A lawsuit that could set an important precedent

This is not an isolated incident within the Apple ecosystem, since just months before another fake app, this time imitating Ledger, had caused the theft of nearly $9.5 million in cryptocurrencies from more than 50 victims. The repetition of these episodes begins to build a pattern that Justice could consider relevant when evaluating whether there was systematic negligence and not just a specific error.

What is really at stake goes beyond the compensation that these three users can claim. Apple has historically used the security argument as its main defense against regulatory pressures seeking to force it to open its ecosystem to third-party stores and allow sideloading on iOS. If a court finds that the company was indeed negligent in allowing fraudulent apps to remain active for months despite warnings, that ruling could seriously weaken that argument and open the door to new regulations on how Apple runs its app store.