UPDATE (7th November 05:19 BST): The fraudulent LocalBitcoins app has been removed from the Google Play app store.
A fake LocalBitcoins app is being distributed on the Google Play store in a bid to steal user bitcoins.
The Helsinki-based bitcoin exchange said that it has reached out to the app store to have the fraudulent app removed. LocalBitcoins staff said earlier today that upon download the fake app seeks “to get access to your account by having you activate HMAC authentication for your account”.
Five reviewers on the Google Play store posted claims that their bitcoins had been stolen as a result of downloading the app.
Kangas said in an email that at this time he “cannot comment whether this phishing app has resulted in stolen bitcoins”, adding:
“At the app page it shows that the app has 10 downloads (from which at least part are purchased downloads and reviews), which indicates that most of the people are aware enough, to not install these suspicious looking apps. We are working to get these completely disabled from app store.”
The app was last updated on 28th October and has been downloaded between 10 and 50 times, according to the store page. An email attributed to the developers as well as the website associated with that email were not working at press time.
Google did not immediately respond to a request for comment.
Image via Shutterstock