Damn...

Spread the blame across all parties. Ledger for not protecting users details, Apple/Google for letting scammers onto their app store, and the musician for being too complacent.