Garrett Dutton, the American musician known as G. Love, has lost 5.9 Bitcoin worth roughly $420,000 after falling victim to a fraudulent mobile application impersonating the official software from Ledger. The incident underscores the ongoing risks of social engineering attacks targeting crypto users.
I had a really tough day today I lost my retirement fund in a hack/Scam when I switched my @Ledger over to my new computer and by accident downloaded a malicious ledger app from the @Apple store. All my BTC gone in an instant.
— G. Love (@glove) April 11, 2026
According to Dutton, the scam led to the complete loss of his retirement savings after he unknowingly entered his seed phrase into the malicious app, which he had downloaded from the App Store onto a new computer. The attacker was then able to drain his wallet almost instantly. The speed of the theft highlights how seed phrase exposure remains one of the most critical vulnerabilities in self-custody crypto storage.
Onchain investigator ZachXBT tracked the stolen funds and reported that the attacker moved and laundered the Bitcoin through KuCoin deposit addresses across nine separate transactions, suggesting a coordinated attempt to obscure the origin of the funds.
The incident reflects a broader trend of increasingly sophisticated scams targeting hardware wallet users. Fraudsters have long used phishing emails, fake support messages, and even physical letters in attempts to trick users into revealing sensitive recovery phrases. Despite repeated warnings from security experts, these tactics continue to succeed.
Crypto-related fraud continues to rise sharply. According to recent data from the FBI’s Internet Crime Report, losses from crypto scams reached record highs in 2025, exceeding $11 billion. The report also noted a significant increase in complaints and high-value victim losses, with thousands reporting losses above $100,000.
How to Minimize Risks
“Most people assume that if an app appears in an official app store, it’s been verified. Scammers exploit exactly that assumption. A listing is not a security audit, and for something as sensitive as a crypto wallet, that distinction matters.
When impersonation apps or phishing attempts targeting Trezor appear, our community is often the first to catch them. Users flag suspicious apps, share warnings, and alert each other in real time. That kind of vigilance from real people is something no automated review process can replace.
The rule is simple: Seed phrases are designed to stay offline. The only place you should ever enter your seed phrase is directly on your hardware wallet. No legitimate app, website, or update process will ever ask for it. If something does, it is a scam. Always download Trezor Suite directly from trezor.io, and only buy devices from official sources,” explained Lucien Bourdon, Bitcoin Analyst at Trezor.
