How to Spot Fake and Malicious Apps Before You Install Them

By Ammar Aslam · Updated September 29, 2026 · 3 min read

Fake apps copy the names and logos of popular apps, or promise useful features, but actually show aggressive ads, steal passwords or subscribe you to expensive services. Even official app stores occasionally let them through.

Warning signs of a fake app

Developer name doesn't match the real company. The real WhatsApp is made by WhatsApp LLC, for example.
Few downloads for an app that should be popular.
Reviews that are overly generic, or recent reviews complaining about ads and scams.
Spelling mistakes in the name or description.
Excessive permissions, like a flashlight app wanting SMS and contacts.
Too-good-to-be-true promises: free premium features, "see who viewed your profile", "earn money by watching ads".

The danger of APK files

On Android, apps sent as .apk files through WhatsApp, Telegram or websites bypass Play Store checks. They're a major source of banking malware, especially fake apps pretending to be banks, delivery services, wedding invitations or government schemes. Don't install APK files from messages.

Keep Install unknown apps turned off for browsers and messaging apps in Settings → Apps → Special app access.

Check permissions before installing

Look at the Data safety section on Google Play or App Privacy on the App Store. Be very cautious with apps asking for Accessibility, SMS or Device admin. See Android app permissions.

Download from the official source

Go to the company's official website and follow its link to the app store, rather than searching and tapping the first result, which could be an ad.

Signs you already have a bad app

Pop-up ads on your home screen or lock screen.
New apps you don't remember installing.
Battery drain and high data use.
Unknown subscriptions or charges.
An app icon that disappeared after installation.

How to remove a malicious app

Go to Settings → Apps and uninstall suspicious apps.
If it can't be uninstalled, check Device admin apps and remove its admin rights first.
Use Safe Mode if the app keeps interfering.
Run Google Play Protect: Play Store → profile → Play Protect → Scan.
Change passwords for important accounts from another device.
Check subscriptions in the Play Store or App Store and cancel unknown ones.

Rule of thumb: if you didn't go looking for an app and someone sent it to you, don't install it.

Subscription traps

Some apps aren't malware but are designed to trick you into expensive subscriptions. They often offer a "free trial" that quickly converts into a weekly payment. Warning signs:

A full-screen offer appears immediately after opening the app.
The close button is tiny or delayed.
The price is weekly rather than monthly or yearly.
Simple tools, like QR scanners, wallpapers or PDF converters, require a subscription.

Check and cancel subscriptions in Play Store → profile → Payments & subscriptions, or on iPhone in Settings → [your name] → Subscriptions. Deleting an app doesn't cancel its subscription.

Protect family members' phones

Turn off "Install unknown apps" for all apps on older relatives' phones.
Require purchase approval with Google Family Link or Apple's Ask to Buy for children.
Remove unused apps and check permissions together occasionally.
Explain the rule: never install apps sent through WhatsApp or SMS links.

Report fake apps

On the Play Store or App Store listing, use the "Flag as inappropriate" or "Report a problem" options. Reporting helps remove harmful apps faster and protects other users.

Frequently asked questions

Are iPhone apps safer?

Apple's store is more restricted, but scam apps with expensive subscriptions still appear. Check reviews and developers.

Is Play Protect enough?

It catches many threats, but careful habits are still essential.

Ammar Aslam
Ammar writes clear, practical tech guides that help everyday users fix problems, stay safe online and get more from their devices.