Fake Cake Wallet apps and scams

Scammers target wallets because one leaked seed phrase is enough to empty them, and crypto transfers cannot be reversed. Cake Wallet's popularity with Monero users, and the confusion with the CAKE token, make its name a frequent target in search results. This page lists the patterns to watch for as of October 2026.

The one rule

Nobody legitimate will ever ask for your seed phrase. Not Cake Wallet, not a support agent, not a "validation" website, not a wallet "upgrade". Cake's documentation says that anyone who can see your seed has full control over your wallet, and tells you never to share it with anyone, including support staff (Cake Wallet docs, 2026).

Fake downloads and clone websites

We have seen look-alike sites ranking for Cake Wallet searches that copy the real site's slogans, offer download buttons for Windows installers, Mac and Linux files and even a browser extension, and later ask about your seed phrase. Warning signs:

• A browser extension. Cake Wallet's documentation lists only mobile and desktop apps. Treat any "Cake Wallet extension" as fake.
• A current Windows installer. New Windows builds are paused during a desktop redesign; only old pre-6.0 builds remain on Cake's GitHub page. A site offering a new Cake Wallet .exe is not official.
• APK files on mirror sites, file-sharing services, Telegram groups or forums. The only official APKs are on Cake's GitHub releases page, in Accrescent and in Cake's F-Droid repository.
• Odd domains: extra words, hyphens, unusual endings, free website builders, or pages on unrelated sites. Cake's official domains include cakewallet.com, docs.cakewallet.com, monero.com and cakepay.com.
• Store listings from another developer. On Apple, the developer is Cake Technologies, LLC. On Google Play, check that the address ends in com.cakewallet.cake_wallet.

Our download checker compares a link or app ID with the official ones, and the download guide shows how to check a file's SHA-256 hash.

We found no verified reports of fake Cake Wallet apps inside the official App Store or Google Play as of October 2026. Store review is not perfect, though: in April 2026 Kaspersky reported 26 fake wallet apps in Apple's App Store for accounts set to China, some posing as unrelated tools, that led users to trojanised versions of other popular wallets to steal seed phrases (Kaspersky, April 2026). Cake Wallet was not among the brands named, but the method shows why you should search the store for the exact developer name and app ID, not tap the first result.

Fake support and impersonators

Cake's documentation warns: never trust someone who messages you first and claims to offer support, because this is almost always a scam (Cake Wallet docs, 2026). Typical approaches:

• A reply to your public post on X, Reddit or Telegram from an account with "Cake", "Support" or "Help Desk" in its name.
• A direct message offering to "sync", "validate" or "unlock" your wallet.
• A link to a form or chat that asks for your seed, private keys or backup file.
• A phone number presented as Cake Wallet support. Treat any such number as a scam.

The official support channels, according to Cake's docs, are the in-app support chat, email to the address on cakewallet.com, and the Telegram support bot listed there. Type cakewallet.com yourself or use a bookmark to find them. Even on official channels, never share your seed.

"Fund recovery" scams

After a theft, victims are often contacted by people promising to trace and recover the coins for a fee. Cake warns that scammers may pose as helpers with promises of assistance or recovery (Cake Wallet docs, 2026). Nobody can reverse a blockchain transaction. Paying a recovery service usually means losing more money.

Investment and "task" scams

Some scams use Cake Wallet only as a tool. Someone you met online, often in a dating app or a job offer, asks you to install Cake Wallet, buy crypto and send it to a "platform" that shows fake profits. Cake Wallet itself is not the problem here, but the outcome is the same: once sent, the funds are gone. If anyone pressures you to move crypto quickly, stop.

On-chain tricks

• Address poisoning. A scammer sends a tiny amount from an address that looks like one you use, hoping you copy it from your history next time. Copy addresses from the recipient or your address book, and compare the whole address with the address checker.
• Spam tokens. Unknown tokens that appear in your EVM, Solana or Tron wallet, often with a website in the name. Do not visit the site or try to sell them. Cake added token scam detection and token whitelisting in 2024 and 2025.
• Wrong network. USDT exists on several chains. Sending on the wrong one can lose the funds. See Ethereum, USDT and tokens.

Name confusion

Cake Wallet is not PancakeSwap's CAKE token, not Cake DeFi, and not CAKE.com or Clockify. Scam pages sometimes exploit this, for example by offering a "Cake Wallet token", an airdrop or staking rewards. Cake Wallet has no token of its own that we know of as of October 2026.

Check any link in 30 seconds

1. Where did the link come from? A message, ad, comment or search result is not a trustworthy source. A bookmark or an address you typed yourself is.
2. Read the domain from right to left. In an address like cakewallet.com.example.net, the real site is example.net. Look for swapped letters, extra hyphens and unusual endings.
3. Check the store details. App ID 1334702542 on Apple; package com.cakewallet.cake_wallet on Android; developer Cake Technologies, LLC on Apple.
4. Check GitHub carefully. The repository is cake-tech/cake_wallet. A copy under another account name, even with the same files, is not official.
5. Check the file. Compare the SHA-256 hash with the release notes before installing anything you downloaded.

Updates for store installs arrive through the store, never as a file sent by email or chat. A message saying your Cake Wallet "must be updated" through a link is phishing.

What the real Cake Wallet never does

If you were scammed

Cake's documentation recommends these steps (Cake Wallet docs, 2026):

1. If your seed was exposed and the wallet still holds funds, create a new wallet for each affected coin in the real app on a clean device and move the funds immediately. Monero wallets need time to sync, which may give you a little longer, but do not wait.
2. Stop using the compromised wallet and never send more to it.
3. Write down the new seed on paper and store it safely.
4. Report the scam to your local police with all messages and transaction IDs. You can also inform Cake Wallet support.
5. If you installed a fake app, uninstall it and assume any seed you typed into it is compromised.
6. Consider turning on Cake 2FA for the new setup, but remember it does not protect a seed someone already has.

Then ignore every message offering to recover the funds.

Frequently asked questions