Skip to content
Last updated 2026-11-05

How to Verify the Wallet App

After this page you will be able to confirm the publisher, the package, the domain, and the update path of a wallet app before you type a recovery phrase into it.

Who this is for

Anyone installing a wallet to use with Bitgold, or accepting an update prompt. If you installed your wallet months ago from a link you trusted and have never updated it, the update section still applies.

Before you start

  • The name of the wallet you plan to use. Bitgold does not ship its own wallet app; you connect a third-party EVM wallet such as TokenPocket or MetaMask, used here as examples.
  • A browser in which you type the address yourself, not a search result.
  • The official starting points: www.bitgold.network or docs.bitgold.network for links, and the vendor's own site for the app.

Steps

1. Start at the domain, not the search result

Open the vendor's site by typing its address, or by following a link from www.bitgold.network. Search engines sell the top of the page to advertisers, and a sponsored result for a wallet name is often a clone that pays for the placement.

Read the address bar, not the page design. A copy can reproduce a logo and a layout within an afternoon; it cannot hold the vendor's domain. Misspellings, extra hyphens, and a different ending — .app or .io where the vendor uses .com — are the usual tells.

2. Check the publisher name on the store listing

Find the developer name under the app title. It should match the vendor exactly, not a name that contains the vendor's name plus an extra word.

Then check the direction of the links. A real listing is referenced from the vendor's own site, and the listing points back to that domain. A clone is referenced from nowhere.

3. Compare the package ID, signature, or hash

Every Android app has a package ID, every iOS app a bundle ID, and a direct download has a file hash. Where the vendor publishes one of these values, compare it with what your store page or download shows. A mismatch means a different app, whatever the icon says.

If the vendor publishes no value, that check is unavailable. Record that fact and rely on the other three rather than skipping the routine.

4. Verify the update path

Updates must arrive through the channel that installed the app: the same store account, the same publisher. An in-app banner or a chat message that sends you to a download page is the standard fake-update move.

Inside a wallet, a genuine update notice opens the store listing. Read the publisher again after every update, because a listing can change hands.

Sponsored results and mirrors are not publishers

A paid ad, a Telegram channel, or a "mirror" download page is not a publisher. If the vendor does not link to it from its own domain, treat the file as unknown — even when it installs and even when the interface looks correct.

Verify it worked

  • The store page shows the vendor's exact developer name, and the vendor's site links to that same listing.
  • The package ID or hash matches the value the vendor published, where one exists.
  • The app opens, offers to create or import a wallet, and can be pointed at Bitgold mainnet with chain ID 618.
  • No update prompt inside the app sends you outside the store.

Troubleshooting

Problem What to do
Two listings share the same name Use the one the vendor's own site links to, and report the other to the store.
The store shows a different developer for my region Stop. Confirm the regional publisher with the vendor before installing.
I installed from a link in a group chat Uninstall it, reinstall from the verified listing, then create a new wallet. The old phrase was entered into an app you cannot vouch for.
The app asks for my phrase to "verify" the update No update needs the phrase. Close the app and reinstall from the store.
I cannot find a package ID anywhere Use the domain and publisher checks, and note which check is missing instead of dropping all four.

Next steps

Self-check

  • I can name the exact publisher of my wallet app.
  • I reached the download through a typed domain or a link the vendor itself publishes.
  • I compared the package ID or hash, or recorded why I could not.
  • I know where my app's updates come from.