Fake Ledger App Drains Musician’s 5.9 BTC Retirement Holdings

A U.S. musician has lost 5.9 Bitcoin worth around $420,000 after installing a malicious application impersonating a crypto wallet, in a case highlighting persistent risks tied to fake apps and seed phrase theft.

Garrett Dutton, known as “G. Love” of G. Love & Special Sauce, said he downloaded what appeared to be the official wallet interface of Ledger from the Apple App Store while setting up a new computer.

After launching the application, he entered his 24-word recovery seed phrase, which gave attackers full access to his wallet. The funds, accumulated over roughly 10 years, were transferred out almost immediately.

Blockchain investigator ZachXBT traced the stolen Bitcoin, reporting that the assets were moved across nine transactions and routed to deposit addresses linked to KuCoin, indicating an attempt to obscure the transaction trail.

The incident did not involve a breach of Ledger’s hardware wallet. Instead, it followed a common attack pattern where users are tricked into entering sensitive credentials into fake software designed to replicate legitimate wallet applications.

Ledger has repeatedly warned that it never requests seed phrases through apps or support channels, and any prompt requesting such information should be treated as a scam.

Similar incidents involving counterfeit wallet apps have been reported in recent years, including cases where fake versions bypassed platform review processes and resulted in significant user losses.

The case adds to growing crypto-related fraud figures. Data from the Federal Bureau of Investigation shows losses linked to crypto scams in the United States reached $11.36 billion in 2025, with investment fraud accounting for the majority.

The incident highlights a key risk in self-custody setups, where control of assets depends entirely on the security of private keys, and a single disclosure can lead to irreversible loss.