Zcash Wallet Scams (2026): Fake Apps, Fake Support, and the Real Links

Updated November 4, 2026.

Most Zcash scams want one thing: your recovery phrase. Three rules stop nearly all of them. Install wallets only from the link on the wallet's official site. Type your phrase only into your own wallet's restore screen. And treat anyone who contacts you first, offering help, as a scammer. Below are the official links for major Zcash wallets, the scam patterns seen in 2026, and what to do if you slipped up.

Quick answer: three rules

1. Install from the official site's link. Not from a search result, an ad, or a link in a message.
2. Your phrase goes into one place: your own wallet's restore screen, on your own device. Zodl's support team puts it plainly: anyone with your seed phrase will be able to spend your Zcash.
3. Nobody legitimate messages you first. Zodl says it will never DM you first on Discord, Telegram, X, or anywhere else.

Official links for major Zcash wallets

Each link below goes to the wallet's own site or its store listing. We checked every link on November 4, 2026. Install from the official site when you can, and compare the listing you land on with the one linked here.

Vizor's official channels are the ones linked from vizor.cash/get: the App Store and Google Play listings above, desktop builds from GitHub releases, the source code on GitHub, and x.com/vizorwallet. Support is by email at support@vizor.cash, listed on the support page. Vizor is built by a team with years of experience building crypto wallets.

Fake wallet apps in the stores

Being in the App Store doesn't make an app real. In April 2026, Kaspersky reported 26 fake crypto wallet apps on Apple's App Store. The pattern:

• The apps copied the names and icons of popular wallets, such as MetaMask, Ledger, and Trust Wallet, behind harmless-looking games or calculators.
• Once opened, they sent users to a fake App Store page and asked them to install a developer profile, which let a trojanized wallet app onto the phone.
• The fake wallet then waited for the recovery phrase.

Kaspersky's advice works for Zcash wallets too:

• Check that the app comes from the legitimate publisher, even in the App Store. Get the link from the developer's official website.
• Don't install developer profiles unless your employer gave them to you.
• Be careful with links that open from inside an app, especially pages that appear unexpectedly.

On Android, install from Google Play through the wallet's official link. Don't install an APK file someone sent you in a chat or email.

Be skeptical of brand-new listings with a familiar name, few ratings, and a recent release date. Look up the wallet's site first and follow its link.

Fake desktop and web versions of mobile wallets

Scammers build desktop or web versions of wallets that don't have one.

• Zodl is mobile only. Its site calls it a Zcash-powered mobile wallet. In May 2026 a forum user asked about a fake "Zodl desktop" download site. The forum moderators flagged it as a scam. The lead moderator replied: "Yep, scam. Any official software from the ZODL team can be found at zodl.com".
• Fake web wallets. No mainstream Zcash wallet asks you to type your phrase into a website.
• Desktop downloads should come from the wallet's own site. Vizor's desktop builds are linked from vizor.cash/get and published on GitHub. For Linux, you can check the signature and checksum. See Zcash desktop wallets.

Fake support and "migration help"

Zcash had two network upgrades in 2026, Ironwood in July and NU7 expected around November 5 (UTC). Upgrades bring "helpers."

• Upgrades happen inside your own app. Vizor guides Orchard to Ironwood migration in the app and switches to NU7 automatically at the activation height. Zodl runs migration inside its app too. Nobody needs your phrase or your funds to do it.
• Real support doesn't come to you. Zodl says anyone inviting you to file a ticket anywhere other than its support email is trying to scam you. Vizor's support page tells you not to share your recovery phrase, private keys, passwords, or other wallet secrets, even in bug reports.
• Voting doesn't need your phrase. The coinholder voting page says no legitimate voting flow will ask for your recovery phrase or hardware wallet PIN.
• Hardware wallet buyers are a target right now. After the October 2026 Keystone store breach exposed customer names and shipping addresses, Keystone warned that scammers may pose as the company offering refunds, replacement devices, or "fixes" and told customers never to enter a recovery phrase into a device they didn't order. Details in Keystone and shielded ZEC.

Fake payment links and swapped addresses

Not every scam wants your phrase. Some just want you to pay the wrong address.

• Check the address you pay. Compare the first and last few characters with what the recipient gave you, through a channel you trust. See how to send ZEC.
• Be careful with payment links from other apps. Vizor shows a warning before request details when a payment link opens from another app, and lets you scan the original QR code. Vizor then shows whether the address, amount, and memo match the link.
• Gift card links work like cash. Anyone who has a Vizor ZEC gift card link can claim it until it's redeemed. Don't post one publicly. See Zcash gift cards.

Viewing-key requests

A viewing key gives read-only access to balances and transaction activity and can't spend funds. That makes it sound harmless. It isn't free to share:

• It shows your history to whoever holds it, and you can't take it back.
• Vizor lets you export an incoming or full viewing key, with an explanation of what each reveals. Read it before you share.
• Share a viewing key only with a person or service you trust, for a purpose you understand, such as an accountant.

If you entered your phrase somewhere

Act fast. Assume someone else now controls the wallet.

1. Install a real wallet from its official link, on a device you trust.
2. Create a new wallet with a new phrase. Don't restore the old one.
3. Send everything to the new wallet now. Include transparent funds.
4. Write down the new phrase and its birthday. See how to store ZEC safely.
5. Ignore "recovery services" that contact you afterwards. They're another version of the same scam.
6. Report the site or app to the store or host that serves it.

If you shared a viewing key you shouldn't have, moving funds to a new wallet also stops future visibility.

FAQ

How do I know a Zcash wallet app is real?

Go to the wallet's official website, tap its App Store or Google Play link from there, and install from that listing. Don't install from search results, ads, or links in messages. Kaspersky found fake wallet apps on Apple's App Store in 2026 that copied real names and icons.

Does Zodl have a desktop or web version?

No. Zodl describes itself as a mobile wallet, and the Zcash forum's lead moderator wrote that official Zodl software is found at zodl.com. Treat any Zodl desktop app or Zodl web wallet as fake.

Will a Zcash wallet ever ask for my recovery phrase?

Only on its own restore screen, when you choose to restore a wallet on your own device. No support agent, website, voting flow, or migration helper needs it. Anyone who asks for it is trying to take your ZEC.

Someone offered to help migrate my ZEC. Is it a scam?

Treat it as one. Ironwood migration and NU7 updates happen inside your own wallet app, and no third party is involved. Real wallet teams don't message you first. Use the support link on the wallet's official site instead.

Are viewing keys safe to share?

A viewing key can't spend your funds, but it shows your balance and transaction history to whoever holds it, and you can't take it back once shared. Share one only with a person or service you trust, for a reason you understand.

What should I do if I typed my recovery phrase into a fake site or app?

Assume the wallet is compromised. Install a real wallet from its official link, create a new wallet with a new phrase, and send all your funds to it right away. Then stop using the old phrase for good.

---

Get the real Vizor. vizor.cash/get links the official App Store, Google Play, and desktop downloads. It's free and open source, and it works with Ledger and Keystone. Questions? Visit Vizor support or browse the code on GitHub.