Fake App / Sideloaded-APK Scam
Scammers get you to install a fake or 'sideloaded' app (outside official stores) that steals your logins, intercepts codes, or drains crypto.
Think a message like this reached you? You can check it right now.
What this scam is
You're directed — often via a link in a scam chat (a fake investment platform, a 'support' fix, a too-good app) — to download an app from outside the official app stores or to 'sideload' an Android APK. The app is malicious: it may steal banking logins, intercept your one-time codes, log what you type, or connect to a fake trading platform that drains your crypto. Installing only from official stores, and refusing to sideload apps a stranger sends, are the defenses.
What it usually looks like
- A link to download an app outside the official store.
- Instructions to 'allow unknown sources' or sideload an APK.
- A fake banking, crypto, or 'support' app.
- An app pushed by a chat contact or scam site.
Common warning signs
- Being told to install an app from a link or sideload an APK.
- Apps not from the official App Store/Google Play.
- Requests to enable 'unknown sources' or broad permissions.
- Apps tied to investment or 'support' scams.
Example wording scammers use
“Download our trading app here to access your account (link outside the store).”
“Install this APK to fix your phone / claim your bonus.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Malware on your device.
- Your logins, codes, and crypto.
- Persistent access to your accounts.
What to do
- Install apps only from the official App Store / Google Play.
- Never sideload an APK or 'allow unknown sources' at someone's request.
- Be wary of apps tied to investment or 'support' pitches.
- Review app permissions; remove anything suspicious.
What to do if you already responded
- Uninstall the app, run a security scan, and change key passwords from a clean device.
- For crypto, assume compromise and move funds/rotate keys.
- Report at reportfraud.ftc.gov and ic3.gov.