Fake Banking Apps
Copycat banking apps steal logins and codes, and some take over your phone. How fake banking apps spread, how to spot them, and how to make sure you install the real one.
A banking app holds the keys to your money, so criminals build fakes. Some copy the look of your bank's app to capture your login. Others are malicious apps that read your texts, overlay fake screens or give remote control of your phone.
How fake apps reach phones
- Links in texts or chats: "download the new version of your banking app".
- Callers who walk you through installing an app. See remote access app scams.
- Files in WhatsApp chats. See malicious APKs.
- Occasionally, copycats in app stores before removal.
How to get the real app
- Go to your bank's official website by typing its address, and follow its app link.
- In the app store, check the developer name matches your bank exactly.
- Check reviews and install counts, which are usually large for real bank apps.
- Keep "install unknown apps" turned off.
Banks do not send apps by text, email or chat, and they do not ask you to install anything during a call.
Signs something is wrong
- An app asks for accessibility permissions or to read SMS.
- Unexpected screens asking for your full card details or PIN.
- Your phone behaves strangely after installing an app.
Related: fake apps and mobile money app safety. For more, see the complete guide to financial scams.
Frequently asked questions
Can fake banking apps appear in official app stores?
Occasionally, before they are removed. Check the developer name matches your bank, and use the link on your bank's official website.
What is sideloading?
Installing an app from a file or website rather than the official store. It bypasses store checks and is a common route for malicious banking apps on Android.
I think I installed a fake banking app. What should I do?
Disconnect from the internet, uninstall it, call your bank on the number on your card, and change your banking password from a safe device.
Sources
- Malware: How To Protect Against, Detect, and Remove It, US Federal Trade Commission
- Mobile Payment Apps: How To Avoid a Scam When You Use One, US Federal Trade Commission
- Take Five to Stop Fraud, Take Five (UK Finance)
