The TradeOgre iOS app that never existed

Why there was never an iOS app

Publishing on the App Store is not a technical exercise so much as an institutional one. Apple requires a developer account tied to a legal entity, review of the submitted binary, and — for anything in the finance category — evidence that the publisher is the business it claims to represent, often including regulatory registration or a verifiable corporate identity.

TradeOgre could satisfy none of that. It had no publicly named operator, no disclosed company, and no registration with any financial regulator. An anonymous exchange cannot prove it is the exchange, which is the entire point of the review process.

There is a documented consequence of this. At least one independent developer built an iOS client for the exchange and reported being unable to publish it, describing a lack of response from TradeOgre to requests for the cooperation that App Store submission would have required. That is a small anecdote with a large implication: the same anonymity that attracted users also excluded the platform from every distribution channel that performs identity checks.

It is worth pausing on that. The App Store review process is frequently criticised, often fairly. In this instance it worked exactly as intended — it kept an unregistered, anonymously operated custodial exchange out of a channel that users reasonably trust.

What people actually used on iPhone

The mobile browser. TradeOgre's website was responsive enough to trade from on a phone, and that was the entirety of the official mobile experience. There was no push notification, no biometric unlock, no widget and no background price alerting.

Some users saved the site to their home screen, which on iOS produces an icon that launches the page in a standalone browser view. That is a bookmark, not an app — a distinction worth keeping clear, because those saved icons are still on people's phones and now lead to a seizure notice.

The practical effect of browser-only access was mostly inconvenience: no alerts meant checking manually, and mobile Safari sessions expire, so you re-entered credentials more often than on desktop. That last point matters in hindsight. Repeatedly typing an exchange password on a phone, sometimes on untrusted networks, is a habit that raises the value of two-factor authentication considerably.

Third-party clients and the risk they carried

Because the API was public and simple, independent developers built clients against it. Some were open-source hobby projects, and the ones written in good faith were genuinely useful — read-only portfolio views, price monitors, order-book viewers.

The risk model still deserves stating plainly, because it applies to every third-party exchange client on any platform.

A third-party app that shows your balances needs your API key. TradeOgre's keys used HTTP basic authentication with no permission scoping and no IP restriction, which meant a key that could read balances could also place orders. Handing that to an application you did not write, whose source you have not read, running on a server you do not control, is a meaningful trust decision — and one many users made casually because the app looked helpful.

An app that asks for your exchange password rather than an API key is worse by an order of magnitude. There is no legitimate reason for a third-party client to need account credentials, and any that asks should be deleted rather than evaluated.

The general rule that survives this case: use API keys rather than passwords, scope them to the minimum permission the tool actually needs, and revoke them when you stop using the tool. If a platform does not offer scoped keys, treat every key it issues as equivalent to your password.

Fake exchange apps and how they work

Impersonation apps have appeared in both major app stores repeatedly, including in the finance category, and they are increasingly patient. A common pattern is to publish something innocuous that passes review, then introduce the malicious behaviour in a later update or activate it remotely for users in particular regions.

The mechanics vary but the goal does not. A convincing login screen captures your email, password and — if you supply it — a live two-factor code, which is used immediately while it is still valid. Some clones instead present a functioning-looking trading interface where deposits are real and withdrawals are not, keeping the user engaged for weeks while the balance is fictional.

A dead exchange is unusually attractive for this. There is no company to file a takedown complaint, no support account to warn users, and a large population of people actively searching for a way back into their accounts. Anyone building a fake TradeOgre app in 2026 has an audience that is motivated, unusually willing to overlook oddities, and has no official source to check against.

Which is why the verification checklist on this page starts with "go to the official website first". For TradeOgre that step now terminates in a police seizure notice — and that is the correct and complete answer.

What to do on iOS now

Delete any TradeOgre-related app or home-screen shortcut from your device. Nothing it points at exists, and a saved shortcut is one accidental tap away from a phishing page if the domain ever changes hands.

If you installed a third-party TradeOgre client at any point, remove it and treat any credentials it held as exposed. Change that password wherever else you used it.

When you set up on a new platform, install its app the slow way: open the official website on the phone, follow its link to the App Store, verify the developer name, and only then install. Enable two-factor authentication before you make a deposit, not after.

And be sceptical of convenience on mobile generally. A phone is the device most likely to be used on an untrusted network, most likely to be lost, and most likely to have you tapping through a login while distracted. That is not an argument against mobile trading — it is an argument for two-factor authentication, biometric locking and keeping long-term holdings somewhere a phone cannot reach.