{"id":126690,"date":"2026-05-08T17:43:24","date_gmt":"2026-05-08T17:43:24","guid":{"rendered":"https:\/\/christiancorner.us\/index.php\/2026\/05\/08\/scam-android-apps-get-millions-of-downloads-with-creepy-pitch\/"},"modified":"2026-05-08T17:45:09","modified_gmt":"2026-05-08T17:45:09","slug":"scam-android-apps-get-millions-of-downloads-with-creepy-pitch","status":"publish","type":"post","link":"https:\/\/christiancorner.us\/index.php\/2026\/05\/08\/scam-android-apps-get-millions-of-downloads-with-creepy-pitch\/","title":{"rendered":"Scam Android apps get millions of downloads with creepy pitch"},"content":{"rendered":"<p>\n<\/p>\n<div data-content-wrapper=\"true\">\n<div class=\"e_f\">\n<div class=\"e_vt\" style=\"max-width:1920px\"><picture class=\"e_Ig\" style=\"padding-top:56.25%;aspect-ratio:1920 \/ 1080\"><source sizes=\"(min-width: 64rem) 51.25rem, 80vw\" srcset=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1.jpg.webp 1920w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-64w-36h.jpg.webp 64w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-1000w-563h.jpg.webp 1000w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-1536w-864h.jpg.webp 1536w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-675w-380h.jpg.webp 675w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-300w-170h.jpg.webp 300w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-1280w-720h.jpg.webp 1280w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2026\/01\/google-play-store-apps-home-page-1-840w-472h.jpg.webp 840w\" type=\"image\/webp\"\/><\/picture>\n<div class=\"e_mv e_wt\">\n<p>Andy Walker\/Android Authority<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div data-container-type=\"content\" class=\"e_Ri e_e e_D\">\n<p>TL;DR<\/p>\n<ul>\n<li>Researchers found dozens of fake Google Play apps that promised call, SMS and WhatsApp history for any number.<\/li>\n<li>The apps had more than 7.3 million combined downloads before they were removed by Google.<\/li>\n<li>The apps charged users and returned fake data.<\/li>\n<\/ul>\n<\/div>\n<div class=\"e_e e_D\">\n<p>Google Play is considered a safe place to get Android apps, but not every app on the store is worth your trust, especially if you&#8217;re looking for them for potentially nefarious purposes. In a new elaborate scam that shows just how far a shady app can go before it&#8217;s shut down, 28 apps on Google Play are racking up more than 7.3 million downloads by promising access to other people&#8217;s call logs, SMS records and WhatsApp call history.<\/p>\n<\/div>\n<div class=\"e_e e_-j\">\n<div class=\"e_ck e_bt\">\n<h3 class=\"e_et\">Have you encountered any scam ads on Android?<\/h3>\n<p>1066 votes<\/p>\n<div class=\"e_gt e_kk\"><button type=\"button\" class=\"e_ht\"><\/p>\n<p>Yes, I meet him regularly.<\/p>\n<p>41<!-- -->%<\/p>\n<p><\/button><button type=\"button\" class=\"e_ht\"><\/p>\n<p>Yes, but only one or two.<\/p>\n<p>12<!-- -->%<\/p>\n<p><\/button><button type=\"button\" class=\"e_ht\"><\/p>\n<p>I&#8217;ve seen them on other people&#8217;s phones.<\/p>\n<p>9<!-- -->%<\/p>\n<p><\/button><button type=\"button\" class=\"e_ht\"><\/p>\n<p>No, I run a systemwide ad-blocking solution.<\/p>\n<p>26<!-- -->%<\/p>\n<p><\/button><button type=\"button\" class=\"e_ht\"><\/p>\n<p>I&#8217;m not quite sure.<\/p>\n<p>10<!-- -->%<\/p>\n<p><\/button><button type=\"button\" class=\"e_ht\"><\/p>\n<p>It&#8217;s complicated (explain in the comments).<\/p>\n<p>2<!-- -->%<\/p>\n<p><\/button><\/div>\n<\/div>\n<\/div>\n<div class=\"e_e e_D\">\n<p>ESET researchers detailed the scam in a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.welivesecurity.com\/en\/eset-research\/fake-call-logs-real-payments-how-callphantom-tricks-android-users\/\"><em>WeLiveSecurity<\/em> report<\/a>Where they collectively refer to the apps as &#8220;Callphantom&#8221;. The apps differed in appearance, but the trick was the same: You entered a phone number, paid to unlock purported communication records, and received fake data in return.<\/p>\n<\/div>\n<div class=\"e_e e_9j e_8j\" data-container-type=\"content\">\n<div class=\"e_e e_D\">\n<p><strong>Don&#8217;t want to miss the best of <em>Android Authority<\/em>?<\/strong><\/p>\n<\/div>\n<div class=\"e_e e_bm\"><picture class=\"e_fm e_gm e_Ig\" style=\"padding-top:31.51%;aspect-ratio:676 \/ 213\"><source sizes=\"9.375rem\" srcset=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_light@2x.png.webp 676w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_light@2x-64w-20h.png.webp 64w\" type=\"image\/webp\"\/><img class=\"e_Jg\" decoding=\"async\" loading=\"lazy\" sizes=\"9.375rem\" title=\"Google Preferred Source Badge Lite@2x\" srcset=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_light@2x.png 676w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_light@2x-64w-20h.png 64w\" alt=\"Google Preferred Source Badge Lite@2x\" src=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_light@2x.png\"\/><\/picture><picture class=\"e_fm e_Ig\" style=\"padding-top:31.51%;aspect-ratio:676 \/ 213\"><source sizes=\"9.375rem\" srcset=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_dark@2x.png.webp 676w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_dark@2x-64w-20h.png.webp 64w\" type=\"image\/webp\"\/><img class=\"e_Jg\" decoding=\"async\" loading=\"lazy\" sizes=\"9.375rem\" title=\"Google Preferred Source Badge Dark@2x\" srcset=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_dark@2x.png 676w, https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_dark@2x-64w-20h.png 64w\" alt=\"Google Preferred Source Badge Dark@2x\" src=\"https:\/\/www.androidauthority.com\/wp-content\/uploads\/2025\/09\/google_preferred_source_badge_dark@2x.png\"\/><\/picture><\/div>\n<\/div>\n<div class=\"e_e e_D\">\n<p>The researchers found that some apps generated random phone numbers and combined them with names and call details already embedded in the code. Others asked users for an email address where the allegedly &#8216;recovered&#8217; history would be sent. Either way, ESET says the apps did not request intrusive permissions or have any real ability to access the requested data.<\/p>\n<\/div>\n<div class=\"e_e e_D\">\n<p>Let&#8217;s not ignore the elephant in the room here. No one deserves fraud, but this is an unusual case where the bait itself was quite questionable. The apps weren&#8217;t promising cheaper wallpapers or better weather widgets \u2013 they claimed to provide access to another person&#8217;s private communication history.<\/p>\n<\/div>\n<div class=\"e_e e_D\">\n<p>The payment side also messed things up. Some apps used Google Play&#8217;s official billing system, potentially allowing some victims to claim refunds. But ESET says others pushed users toward third-party payment apps or directly to the card checkout form inside the app. In one case, when users tried to leave the app, it showed misleading alerts like a new email claiming call history results had arrived, then redirected users back to the subscription screen.<\/p>\n<\/div>\n<div class=\"e_e e_D\">\n<p>ESET reported 28 apps to Google on December 16, and all of them had been removed from Google Play by the time the report was published. Although sideloading may receive more criticism when it comes to protection from scams, we are reminded that the Play Store can still give bad apps a large audience once they slip through.<\/p>\n<\/div>\n<div data-container-type=\"content\">\n<div class=\"e_pd e_D\">\n<p>Thank you for being a part of our community. Please read our comment policy before posting.<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Andy Walker\/Android Authority TL;DR Researchers found dozens of fake Google Play apps that promised call, SMS and WhatsApp history for any number. The apps had more than 7.3 million combined downloads before they were removed by Google. The apps charged users and returned fake data. Google Play is considered a safe place to get Android<\/p>\n","protected":false},"author":1,"featured_media":126692,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[1601,1633,8856,28772,4006,5695,8860],"class_list":{"0":"post-126690","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-devotionals","8":"tag-android","9":"tag-apps","10":"tag-creepy","11":"tag-downloads","12":"tag-millions","13":"tag-pitch","14":"tag-scam"},"_links":{"self":[{"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/posts\/126690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/comments?post=126690"}],"version-history":[{"count":1,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/posts\/126690\/revisions"}],"predecessor-version":[{"id":126693,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/posts\/126690\/revisions\/126693"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/media\/126692"}],"wp:attachment":[{"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/media?parent=126690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/categories?post=126690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/christiancorner.us\/index.php\/wp-json\/wp\/v2\/tags?post=126690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}