Mobile Phone Security

Spotting Fake and Risky Mobile Apps

Learn the signs of fake mobile apps, such as copycat names, odd permissions and pushy ads, and how to stick to reputable sources when installing software.

On this page
  1. Why fake apps exist
  2. Start with the source
  3. Signs that an app may be fake or risky
  4. Checking before you install
  5. After installing
  6. The core habit

Why fake apps exist

Apps are popular, and people trust familiar names. That makes a convincing copy valuable to someone with bad intentions. A fake app might copy a bank’s logo, imitate a well-known game, or pretend to be a handy tool such as a scanner, a keyboard or a free VPN. Some are designed to show endless advertising. Others try to collect personal details, or to charge subscriptions that are hard to cancel. A small number aim to take over a device or steal login details.

Official app stores check what is submitted, and generally remove problem apps, but no review process catches everything. A little caution on your side makes a real difference.

Start with the source

The simplest protection is where you get apps from.

  • Use the official store for your phone. This is the single most useful habit. Apps from the main store have at least passed some review, can be reported, and can be updated through the store.
  • Be wary of links. A text message, email or advert that links straight to a download should be treated with suspicion. Open the store yourself and search by name. Text message scams and fake delivery notices sometimes push people to install an app to “track a parcel” or “fix a problem”.
  • Avoid installing from unknown websites. On some phones it is possible to install apps from outside the official store. This usually requires you to change a security setting that warns you for good reason. Unless you are an experienced user and know the source well, leave that off. Safe software downloads and pirated software risks explain similar dangers on computers.
  • Be careful with “modified” or free versions of paid apps. Cracked apps are a common way to deliver unwanted software.

Signs that an app may be fake or risky

No single sign proves anything, but several together are a reason to stop.

The developer name looks wrong. Check the publisher listed on the app page. A genuine bank app usually comes from the bank, or a clearly related company, not from an unfamiliar individual. Names with small spelling changes, extra words or odd punctuation are a warning.

The name or icon copies another app. Look for near-identical names, such as an extra letter, “free”, “pro” or “official” added to a known brand. Compare against the company’s own website, which usually links to its genuine app.

Few or strange reviews. A brand-new app with a long list of five-star reviews written in the same style may be padded. Read the lower-rated reviews too, which often describe problems honestly. Absence of reviews for something that claims millions of users is odd.

Low download count for a supposedly famous service. A well-known service normally has a very large number of installs. A tiny number suggests a copy.

Poor quality. Spelling mistakes, blurry screenshots, vague descriptions and generic text are common in low-effort fakes. This is not always the case, as some are polished.

Promises that sound too good. Apps claiming to find out who viewed your profile, give free money, unlock paid content, remove viruses instantly or boost your phone are often misleading. Fake virus alerts and “cleaner” apps are especially well-known tricks.

Permissions that do not fit. A flashlight, wallpaper or calculator app that asks for contacts, messages, location and microphone is asking for more than it needs. Reviewing app permissions on your phone explains how to check and change them. Be extra careful with requests for accessibility control or the ability to appear over other apps, which can be abused.

Pushy behavior. Constant full-screen ads, notifications that appear when the app is closed, repeated prompts to pay, or difficulty exiting the app are signs of aggressive design.

Requests for sign-in details in odd places. If an app asks for your email password, banking login or card details in a way that feels unusual, check with the service’s own website first.

Checking before you install

A short routine takes less than a minute.

  1. Search for the service on its official website and follow the store link from there.
  2. Check the developer name, the number of downloads and the date of last update.
  3. Read a mix of reviews, especially recent and critical ones.
  4. Look at the listed permissions and data collection information, where the store provides it.
  5. Ask yourself whether you need an app at all. Many services work well in the phone’s browser, and not installing is the safest choice.

After installing

If something feels off, trust that feeling.

  • Watch behavior. Unexpected ads, battery drain, a hot phone, new icons you did not add, or settings that changed themselves can indicate trouble. These can also have innocent causes, so do not jump to conclusions.
  • Remove it. Uninstall the app. If it will not uninstall, check whether it has been granted special administrator rights in settings, remove those, and try again.
  • Check permissions and accounts. Review which permissions were granted. If you typed a password into it, change that password from a trusted device, and anywhere you reused it. Password reuse is what turns a small leak into a large one.
  • Run updates. Keep your system current, as explained in the article on phone software updates.
  • Report it. Most stores let you report an app. This helps protect others.
  • Watch for follow-on problems. If payments or accounts were involved, contact your bank, and look at account takeover signs and transaction alerts. If you remain worried, backing up your data and resetting the phone is a reliable way to clear it. Our reset guidance for phone data wipes covers this.

The core habit

Install less, from fewer places, and look before you tap. Official stores are not perfect, but they remove many of the worst problems. Combine that with attention to the developer, reviews and permissions, and you will avoid most of the trouble.

The complete guide to mobile phone security

Securing Your Smartphone in Ten Minutes
Read the guide

Keep exploring

Guides from other topics

All topics →