Blog/Online scams

Fake App Store Support and Fake Apps

Copycat banking apps, fake investment apps, apps sent as download links, and fake "app support" accounts. How fake app scams work and how to install and get help safely.

CyberWatch AI29 September 2026 · 2 min read
Blurred app icons on a phone home screen

Apps are how most of us bank, pay, shop and talk. That makes fake apps an effective way to steal. Some copy a real bank or payment app. Some pretend to be trading or loan platforms. Some arrive as a download link from a "support agent". And some scammers pose as app support to "help" you with a problem you posted about online.

Types of fake app scams

ScamHow it works
Copycat appsLook like a real bank, wallet or delivery app, and steal your login when you sign in.
Apps sent as links or files"Install this app to receive your refund or parcel." Often malware that reads your texts and codes.
Fake investment and loan appsShow fake profits or approve fake loans, then demand fees. See romance investment scams.
Fake app supportAccounts that reply to complaints, then ask for your login, codes or remote access.
Fake updatesPop-ups saying you must update an app or your browser, leading to malicious downloads.

Install apps only from your phone's official app store, ideally by following the link on the organization's official website.

How to check an app before installing

  • Developer name: does it match the real company exactly?
  • Downloads and reviews: a real bank app usually has many downloads and a long review history. Read recent reviews for complaints.
  • Official link: find the app through the company's official website.
  • Permissions: be wary of apps that ask to read your SMS, control accessibility features or draw over other apps without a clear reason.
  • Install source: on Android, keep "install unknown apps" switched off unless you have a specific, trusted reason.
Illustrative example · Message after a failed delivery
Your parcel cannot be delivered. To reschedule, please install our tracking app from this link and allow all permissions: hxxps://track-parcel-app[.]link/download.apk
Red flags:
  • An app file sent by link instead of an official store.
  • A request to "allow all permissions".
  • Couriers do not require an app install to reschedule a delivery.

Getting genuine help

  • Use the help or contact section inside the official app.
  • Find support details on the company's official website.
  • Treat unsolicited "support" replies on social media with caution. See fake customer care numbers.
  • Never share your password, PIN or codes with support, even genuine staff.

If you installed a fake app

  1. Disconnect from the internet and uninstall the app. On Android, check that it does not have device admin rights.
  2. Call your bank from a different phone if you entered banking details or the app could read your texts.
  3. Change passwords from a clean device and turn on two-step verification.
  4. Run a security scan, such as Google Play Protect on Android.
  5. If problems continue, back up essential data and consider a factory reset.

Sent an app link? Paste it into CyberWatch AI Scan for a free check before you install anything.

For more on malicious apps and devices, see our malware and ransomware guide. For the bigger picture of how online scams work, read our complete guide.

Frequently asked questions

Can fake apps get into official app stores?

Occasionally, although stores remove them when found. Check the developer name, number of downloads, reviews and the link from the organization's official website before installing.

Is it safe to install an app from a link someone sent me?

Generally no. Apps installed from links or files outside official stores, especially on Android, can contain malware that steals codes and banking details.

How do I get real help with an app?

Use the help section inside the official app, or the support page on the company's official website. Be wary of 'support' accounts that reply to you on social media.

Sources

  1. Use Google Play Protect to help keep your apps safe and your data private, Google Play Help
  2. Protecting against malware in macOS, Apple Platform Security
  3. How To Protect Your Phone From Hackers, US Federal Trade Commission
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.