Last October, California resident Jacob Pearlman downloaded an Android version of a cryptocurrency wallet app called Phantom from the Google Play App Store.
It was four months Before San Francisco-based Phantom Technologies has actually released an Android version of its digital wallet. The free Phantom Wallet app that Pearlman first downloaded from Google Play was a fake. And when he connected his real Phantom wallet to the app, it cost him a small fortune.
“Less than 24 hours after downloading the fake ‘Phantom Wallet’ app from Google Play, Pearlman’s real Phantom wallet was emptied of over $800,000 in virtual currencies, including SAMO, USDC, ORCA and SOL, as well as four additional NFTs, ” his lawyers say in a lawsuit seeking to recover stolen funds from Google instead of the fake app operator.
The complaint [PDF]filed in Santa Clara County Superior Court, seeks to hold Google liable for breaching its own warranty regarding its security practices and terms of service.
However, the court record also indicates that Phantom 11 October 2021 issued a public warning that Google’s store offered low-quality products. Back then, the real Phantom offered its crypto wallet as a browser extension for Chrome, Brave, Firefox and Edge. Today, it provides iOS and Android versions along with browser add-ons.
“Phantom is NOT available on iOS or Android,” the company tweeted last year. “Using a fake Phantom mobile app will result in your money being stolen. Please help us by reporting these apps when you see them in app stores.”
Users responded to this warning by lamenting that they had been cheated, and the next day Phantom said: “We removed eight different apps this week alone. We can only remove them as fast as Google responds to our removal requests.”
Nevertheless, it seems that Google has not been able to keep fake cryptocurrency-stealing apps out of Google Play.
“Despite Phantom’s efforts to prevent fake Android apps from the Google Play Store, and despite Google’s blatant warning that it was offering fraudulent ‘Phantom Wallet’ apps for download, Pearlman was able a few days later, on October 21 2021, download and did it. one,” Pearlman’s complaint said.
The court filing claims that by offering apps through Google Play, the chocolate factory represents that those apps are safe and warrants through its terms of service that it oversees its services with reasonable care.
According to the complaint, Google “violated its own warranty and terms of service by offering a fraudulent app, failing to warn Pearlman that the app might be dangerous, and failing to block Pearlman from downloading the app.”
Asked for comment, Google did not immediately respond.
Google requested more time to respond, and the judge ruled that the case was complex and required more time. A case management conference is scheduled for next week.
If Pearlman is able to recover $800,000 from Google, the lawsuit seems like a better investment than the stolen cryptocurrency mix so far. Since October 21, 2021: SOL is down ~80% from $196.43; ORCA is down about 92% from $12.42; SAMO is down about 55% from its price of $0.029; and the USDC, pegged to the dollar, remains roughly the same.
If Phantom sounds familiar, that’s because it was caught in an attack on Slope wallets this week, where millions of dollars in cryptocurrencies were stolen from around 8,000 wallets. ®