How to verify the wallet app
When using a decentralized self-custody wallet, one of the most important security prerequisites is to make sure that the wallet app you installed comes from official channels. Fake wallets usually disguise themselves as official websites, search ads, third-party APKs, or counterfeit apps. Once users import their mnemonic phrase, private key, or Keystore into a fake wallet, the address may be monitored. Once a large amount of assets is detected, the assets may be stolen immediately or permissions may be maliciously modified.
How to Identify Fake Wallet Links
Many users download wallets through search engines, community links, advertising pages, or installation packages sent by others. These are common ways fake wallets are spread.
Common Sources of Fake Wallets
Please pay special attention to the following download sources:
Advertisement links in search engines
Wallet download links sent through communities, private messages, or by strangers
APK installation packages provided by third-party websites
Download pages impersonating the TokenPocket official website
Websites with domain names similar to the official website but not official
Installation packages claiming to be a “new wallet version,” “exclusive version,” or “airdrop version”
Pages that require users to enter a mnemonic phrase for “verification,” “synchronization,” or “upgrade”
Official TokenPocket Channels
When downloading TokenPocket, please prioritize official channels for access and installation.
Official Websites
Please make sure you use the following official domains:
https://www.tokenpocket.prohttps://www.tpwallet.iohttps://www.tp.xyz
After visiting the official website, you should use the download entrance provided on the official website to access the corresponding platform download page.

Official Website Download and Verification
When downloading an installation package from the official website, you should confirm that the download page comes from the TokenPocket official website and prioritize the verification methods provided by the official website to check app security.
Download from the Official Website
The operation steps are as follows:
Open the TokenPocket official website.
Click “Mobile Download” on the page or the download entrance for the corresponding system.
Enter the official download page.
Select the Android or iOS download method based on your current device system.
After the download is complete, continue to verify the app source and the integrity of the installation package.
Google Play Version Verification
If you use an Android device and Google Play is available in your region, it is recommended to search for and download TokenPocket through Google Play first.
How to Identify the Official App on Google Play
The operation steps are as follows:
Open Google Play.
Search for
TokenPocketin the search bar.Open the TokenPocket app details page.
Check the developer name, app rating, number of reviews, downloads, and app description.
Confirm that the download entrance comes from the official app details page.

Official apps usually have relatively complete app information, stable rating records, more reviews, and download data. Counterfeit apps often have a short release history, and their number of reviews, downloads, developer information, or app descriptions may appear abnormal.
App Store Version Verification
iOS users should download the official TokenPocket app through the App Store. Since regional policies and listing status may change, please refer to the current actual display in the App Store.
How to Identify the Official App on App Store
The operation steps are as follows:
Open the App Store.
Tap “Search” in the lower-right corner.
Enter
TP Walletor the app name currently displayed by the official channel in the search bar.Open the app details page.
Check the developer information.
Confirm whether the app information, rating, reviews, and update history are normal.
The original content of the current tutorial mentions that the developer information of the official app in the App Store should be:
TP Global Ltd

At the same time, earlier versions may have displayed:
TOKENPOCKET FOUNDATION LTD
If you downloaded an older version from the App Store before October 8, 2022, and the developer is shown as TOKENPOCKET FOUNDATION LTD, it is also an earlier official version developed by TokenPocket and can be used normally. However, update services for this early version may be suspended later.
Handling Suspicious Apps or Websites
If you find that the app you downloaded may be a fake wallet, or if you have entered your mnemonic phrase, private key, or Keystore into a suspicious app or website, please stop using it immediately.
If wallet key information has been leaked, the corresponding wallet address should be considered unsafe. Please create a new wallet through the official TokenPocket app and transfer the remaining assets to the new wallet as soon as possible.
Security Reminders
Please keep the following safety rules in mind:
Do not download wallet apps through search engine ads.
Do not install APK packages sent by strangers or third-party groups.
Do not use wallet download links from unknown sources.
Do not enter your mnemonic phrase, private key, or Keystore on any suspicious page.
Do not trust pages that ask you to enter a mnemonic phrase for “verification,” “synchronization,” or “upgrade.”
Always download TokenPocket through official channels.
Always verify the domain name, app developer information, and installation package hash value.
If key information has been leaked, transfer assets to a new secure wallet immediately.
Summary
The key to identifying whether a TP wallet is official is to confirm the download source, website domain, app developer information, and installation package integrity. Fake wallets usually disguise themselves as official websites, search ads, third-party APKs, or counterfeit apps to obtain users’ mnemonic phrases, private keys, or Keystore information.
Before downloading or importing a wallet, please carefully verify whether the channel is official. Once mnemonic phrases, private keys, or Keystore information are leaked, the assets in the wallet may be at risk of being stolen.
TokenPocket will never ask users for mnemonic phrases, private keys, Keystore files, or wallet passwords in any form. Please protect your wallet key information properly.
Last updated
Was this helpful?