Fake App Downloads
Malicious apps that mimic real ones to steal logins, intercept codes, or drain accounts.
Last reviewed: 1 June 2026
What this scam is
Fake app download scams distribute malicious apps that imitate banking, trading, security or popular apps. Installed from links or unofficial stores, they steal credentials, intercept one-time codes, or grant remote control.
How it works
You're directed to 'download our app' via a link, ad, or scam contact. The app looks legitimate but harvests logins, reads your texts (capturing 2FA codes), or enables overlay attacks on your banking app.
Common red flags
- Instruction to install an app from a link, not the official store
- Requests for excessive permissions (SMS, accessibility)
- Apps tied to a scam 'job' or 'investment' platform
- App not found in the official store under that name
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Install our secure trading app from this link to access your account: [fake link].
Payment methods used
- Account theft via stolen credentials/codes
Who is usually targeted
- Mobile users
- Banking and crypto app users
What to do immediately
- Only install apps from official app stores
- Review and revoke risky permissions; uninstall suspicious apps
- If a banking app may be compromised, contact your bank and change credentials
Evidence to preserve
- The download link/app name
- Permissions requested
- Source of the prompt
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Why is installing from a link risky?
Apps from links or unofficial stores bypass store security checks and may be malware. Install only from official app stores, and be cautious of apps requesting SMS or accessibility permissions.