Fake fomo apps and impersonation scams: what is confirmed and what is not

If you came looking for a fomo app scam warning because of the September 2026 malware headlines, start with a correction. Those headlines were not about a fake fomo app.

The app in that story was FomoPeek, a whale-watching tool that shipped malware inside its own releases, through its own developer account. SlowMist, the security firm that published the analysis on 19 September 2026 alongside OKX’s security team, says it was not a counterfeit app. The name collision with fomo is the only reason it ended up on lists of fake fomo apps.

Real impersonations of fomo do exist. Three have been documented, and the newest one matters most, because the victim did nothing that the usual crypto safety advice tells you not to do.

What the FomoPeek story actually was

FomoPeek was a real product with real users. Its version 1.1, released on 9 September 2026, carried malicious modules. So did version 1.2 on 12 September. Version 1.3, on 17 September, removed them. SlowMist and OKX published the analysis on 19 September, and the firm Salus traced the funds: about 579,984 USDT, roughly $580,000, reached the attacker’s main address.

Read that figure carefully, because almost every article that repeats it gets it wrong. It is the inflow to one address. It is not an audited total of what victims lost, and nobody has published one.

This page does not name FomoPeek’s developer or its app id. The only places those appear are affiliate posts and IPA mirror sites, which is not a standard worth meeting on a page about not installing the wrong thing.

So FomoPeek belongs on your reading list as a reason to distrust an app you already installed. It does not belong on a list of fomo fakes.

The two fake fomo websites on record

Both were documented by PCrisk, and both followed the same shape: copy the site, replace one button, drain the wallet that connects.

claim-fomo.family, May 2025

Documented on 9 May 2025. It imitated the official site and advertised an event for eligible users. A check eligibility button prompted a wallet connection, and approving that prompt signed a drainer contract that went after the most valuable assets it could reach.

PCrisk says plainly that there is no such fomo event and that the real platform has no native token. That second detail is the one to keep. fomo has no token, so an airdrop page, a claim page or an eligibility checker is a phishing page before you get as far as reading the domain.

fomoo.family, July 2026

Documented on 16 July 2026 by the researcher Tomas Meskauskas. A copy of the site with a doubled letter in the domain and one functional change: the download button was swapped for a connect wallet button offering MetaMask, Trust Wallet and OKX Wallet. Approving the connection triggered a drainer.

This one rests on a single report, and the site is reportedly down. No loss figure was ever published for it. If you see one quoted, it was made up.

The attack that should change your checklist

Around 8 October 2026, SlowMist documented the theft of about $48,000 from one fomo web user. The route is worth walking through slowly.

The user was on the fomo web app and clicked a token’s project link, which took them to voltage.family. That page ran a fake human verification step, the kind that asks you to prove you are not a bot. Instead of a puzzle, it told them to drag an icon into their browser’s bookmarks bar and click it.

That icon was a bookmarklet, a bookmark that runs JavaScript on whatever page you are viewing. Clicked on the fomo web app, it read browser storage and sent back the user’s Privy access and refresh tokens, IndexedDB data and wallet data. With a valid session token, the attacker did not need the account’s password or anything else.

Now the part that matters. The victim never connected a wallet. They never signed a transaction. They never typed a seed phrase, and they could not have, because fomo wallets are built on Privy and have no seed phrase to type. They had signed in with Google and had no two-factor authentication on it.

Every piece of advice you have read about memecoin safety would have left them exactly as exposed. “Never share your seed phrase” is sound and useless here. The credential that was stolen was a live session.

SlowMist’s own guidance after the case is short enough to memorise. Real verification never asks you to drag anything into your bookmarks bar. Audit the bookmarks you have, since one you did not create is a red flag on its own. Turn on multi-factor authentication for the account you log in with. And if you have already run something suspicious, revoke your sessions from a device you trust rather than from the device that ran it.

The checklist this page exists for

These are the properties fomo publishes. Everything else claiming the name is somebody else’s.

What	The real one
iOS app	“fomo - never miss out”, App Store id 6741115427, seller FOMO Labs Inc.
Android package	family.fomo.app
Website	fomo.family
X	x.com/fomo
Discord	discord.gg/fomofamily
Instagram	instagram.com/tryfomo
Support email	support@fomo.family, named in the terms of service

The fomo app download page has the two store listings as links, which is a safer route than searching the store and picking by icon.

Things that are not fomo and keep getting mistaken for it: the X account @fomo_lab, which is an unrelated NFT project; fomo.io, which is a different company with nothing to do with FOMO Labs; the Shopify app called Fomo, which has sold store notification widgets since 2015; and several unrelated App Store apps that use the word FOMO. fomo also lists no Telegram channel anywhere, so a Telegram account offering fomo support is not fomo support. The outage and support page keeps the current contact list in one place.

The publisher name is the tell

The fake-app cases from 2026 that did real damage all share one weakness, and it is not the icon or the screenshots.

A fake Ledger Live on the macOS App Store took about $9.5 million from roughly 50 users in April 2026. It was published under the name Leva Heal Limited, a company with no connection to Ledger. A fake Sparrow Wallet listing on iOS took about $1.8 million and drew a lawsuit filed on 24 July 2026. The real Sparrow is desktop software and has no iOS app at all, so the listing could only ever have been fake. Kaspersky’s FakeWallet research in April 2026 counted 26 App Store apps imitating Trust Wallet, MetaMask, Ledger and others.

In each case the app name looked right. The publisher line did not.

Which gives you two habits. Read the seller or developer field, not the title, before you install. And check it more than once, because FomoPeek’s version 1.0 was clean and its version 1.1 was not. Re-read the publisher when you reinstall, when you set up a new phone, and any time a link in a chat or a reply drops you onto a store page.

fomo says nothing about any of this

On 11 October 2026, no impersonation or phishing warning could be located on fomo.family or on its blog. The only security post there is Spotting Scams and Low-Quality Tokens from 25 December 2025, and that one is about scam tokens traded on fomo, not about fakes of fomo.

That is a gap, not an accusation. Plenty of apps leave this to the security firms. It does mean that if you are checking whether something is real, fomo’s own site will not help you much, and a page like this one or the is fomo legit breakdown is doing work the company has not done. If you want the registered-company side of it, who owns the fomo app has the filings and the funding trail.

If you think you already clicked

Work in this order, from a device you have not used on the suspect page.

1. Sign out of all sessions and revoke them, then log back in.
2. Change the password on the email address or Google account you use to sign in to fomo, and turn on two-factor authentication there. With no seed phrase in the picture, that login is the front door.
3. Delete any bookmark you did not create yourself.
4. Move funds you cannot afford to lose to a wallet whose keys you hold.
5. Email support@fomo.family with times and transaction hashes, and post in the Discord. Nothing here is a guarantee of recovery, and onchain transfers do not reverse.

One last thing worth separating out. A fake app and a bad token are different problems with the same ending, and most money lost on apps like fomo goes to the second one. If you are chasing new coins rather than fakes, the Solana meme coins guide covers honeypots and liquidity traps, and deposit problems covers the funding failures that are usually your bank rather than an attack. Memecoin trading is high-risk speculation, not investing, most people who do it lose money, and nothing on this page is financial advice.