Agent Lane robot mascotAgent Lane
Menu

Guide

Fake AI apps and browser extensions that steal crypto

Some links may earn us a commission at no cost to you, which helps keep these guides free and up to date.

Short answer: Some “AI” apps, websites and browser extensions are traps that steal passwords, wallet details or deposits. Install only from the official app store or the maker’s own site, give extensions as little access as possible, keep crypto wallets on a device or browser profile you don’t experiment on, and never download an app because a stranger sent you a link.

By Agent Lane Editorial · Page dated 3 November 2026

How do fake AI apps steal crypto?

In two main ways. Some are malware: Google’s Mandiant team found thousands of social media ads for fake “AI video generator” sites that handed visitors a download containing password-stealing software and backdoors. Others are fake investing apps: the FBI has warned about apps using the names and logos of real US financial firms, where people deposited crypto and then couldn’t withdraw it, sometimes after paying a supposed “tax.” It counted 244 victims and about $42.7 million lost in one warning.

Where do people pick up fake AI apps?

  • Ads on social media for a new or free AI tool, as in Mandiant’s findings.
  • Links from people met online. The FBI says scammers met on dating and networking apps steer victims to test versions of “crypto exchange” apps, which skip the app stores’ normal review.
  • Look-alike websites that copy a real tool’s name and design.
  • AI-written pages. The FBI says scammers use AI to write content for fake crypto investment websites.

What can a bad browser extension do?

Chrome’s own help pages explain that some extensions can “read and change all your data on websites you visit.” On a crypto exchange or wallet page, that kind of access is exactly what a thief wants. Chrome lets you limit each extension to running only when you select it, on specific sites, or on all sites, and says to approve only extensions you trust.

What are the warning signs of a fake app?

The FBI lists these signs of a malicious app:

  • A high number of downloads with few or no reviews.
  • Permission requests that have nothing to do with what the app says it does.
  • Vague descriptions, or spelling and grammar mistakes.
  • Your battery draining faster or your phone slowing down.
  • Pop-ups that look like ads, system warnings or reminders.
  • Apps installed that you don’t remember installing.

How do I install AI tools and wallets safely?

  • Start from the official site or store. MetaMask, for example, links to its extension and app from its own help center for each browser. Don’t trust a search ad or a link in a chat.
  • Check the publisher name and reviews before you install. The FBI recommends checking the developer and customer reviews first.
  • Turn down broad access. Set extensions to run only when you click them, and remove ones you no longer use.
  • Keep a separate browser profile for crypto with only your wallet installed, and try new AI tools somewhere else. See separate browser profile.
  • Keep savings on a hardware wallet from Ledger or Trezor. Your recovery phrase stays on the device, so password-stealing software on your computer can’t read it, as long as you check each request on the device’s own screen.
  • Never paste a seed phrase or exchange key into an AI tool. See never paste API keys in chat.

What should I do if I installed something suspicious?

Remove the app or extension. From a different device you trust, change your exchange and email passwords and sign out of other sessions, then move crypto from any wallet that was on the affected device to a new wallet created on a clean device. Report it at ic3.gov. If a wallet request was involved, also follow what to do if you signed.

Sources

Checked 3 November 2026 on each organization’s own site.

Related guides

All guides