How to spot fake apps

Apple and Google both let some fakes slip through their app stores. Not many, but enough to cause real damage if you install the wrong banking app or password manager. The good news is that fake apps have a small set of tells. Once you know what to look for, spotting one is fast.

Red flag 1: The developer name is off

Every app in the App Store and Play Store has a developer name. Tap it. The real developer name for big apps matches the company exactly (or "Inc.," "Corp.," etc.).

• Bank of America's app is by "Bank of America." Not "BoA Apps," not "BOA Mobile Group."
• Chase is by "JPMorgan Chase & Co."
• Wells Fargo is by "Wells Fargo Mobile."
• Real PayPal is by "PayPal, Inc."

If the name is slightly different ("Wells Fargo Bankk," "Pay Pal Mobile"), it is fake. Always.

Red flag 2: Download count is too low for a famous app

If a real bank or major app has only thousands of downloads, something is wrong. Real banking apps have tens or hundreds of millions of downloads.

If you see 5,000 downloads for a "Chase Mobile Banking" app, it is fake.

Red flag 3: Review patterns look weird

Real apps have a mix of star ratings, complaints, and praise written over years. Fake apps have:

• All 5-star reviews
• All written in the past week or two
• Same kind of generic phrases ("Great app!" "Easy to use!" "Highly recommend!")
• Few or no negative reviews
• Reviews mention the app does totally different things than the description

Red flag 4: Typos, ugly screenshots, generic icons

Big companies have full design teams. Their app pages are polished. Fakes do not.

• Spelling mistakes in the title, description, or screenshots
• Low resolution or distorted screenshots
• Generic stock photo icon instead of a real logo
• Description text that looks like it was machine-translated
• Wrong colors or off-brand logos

Red flag 5: Asks for the wrong permissions

A calculator app should not need your contacts. A flashlight app should not need your location 24/7. When installing:

• iPhone: permissions are requested one at a time when the app needs them. Read each prompt.
• Android: tap "App permissions" on the Play Store page before installing. Look at what it asks for.

If permissions do not match what the app supposedly does, do not install.

Red flag 6: Too new for what it claims to be

Tap "About this app" or the version history. If a "Bank of America" app was published 2 months ago, it is fake. Real apps from big companies have been on the store for many years.

How to install banking apps safely

Always start from the bank's website, not the App Store search.

1. Type the bank's web address directly into a browser (do not click email links).
2. Find their "Mobile" or "App" page.
3. Tap the App Store / Play Store link there.
4. That link goes to the real app.

Same for crypto exchanges, password managers, and any financial tool. Going via the company's own website removes any chance of a search-result fake.

Specific categories where fakes are common

• Banking and credit cards: always go via the bank's website.
• Crypto wallets: MetaMask, Trust Wallet, Coinbase, Ledger all have fakes. Triple-check before entering a seed phrase.
• Password managers: only install Bitwarden, 1Password, Apple Passwords, Google Passwords, or LastPass from their real developer pages.
• Antivirus / security: a lot of fake "antivirus" apps are themselves scams. See our free antivirus guide.
• WhatsApp, Signal, Telegram: fakes occasionally appear.
• Popular games right after a hit launch: "Pokemon Go" clones, "Among Us" clones, etc.
• Photo editors and AI apps: the most common fake category in 2026; many push subscriptions you cannot cancel from inside the app.

If you already installed a fake app

1. Delete it immediately. iPhone: long-press the icon, choose Remove App. Android: long-press, Uninstall.
2. Change any passwords you entered into it. Do it from a different device if you can.
3. Call your bank or service provider if it was a banking app. Tell them you may have been phished.
4. Check accounts for unauthorized activity. Recent logins, transactions, devices.
5. Turn on 2FA on any accounts the fake app could have accessed. See our 2FA guide.
6. Android: run Play Protect (Play Store > profile icon > Play Protect > Scan).
7. Report the fake app:
   • App Store: scroll to bottom of app page, tap "Report a Problem."
   • Play Store: scroll to bottom of app page, tap "Flag as inappropriate."

Things that look fake but are not

Some real apps look sketchy:

• Newer small bank apps may have only thousands of users. Verify by going via the bank's website.
• Indie apps with few reviews are often legit, just small. Look at the developer's other apps and website.
• Apps from outside the US may have rougher English. Look at developer, downloads, and screenshots.

If you are unsure, type the developer name into Google. Real companies have websites, support contacts, and a paper trail.

Sideloading apps (Android only): extra danger

Installing apps from outside the Play Store (called "sideloading," using APK files) bypasses Google's checks entirely. Only do this if you know what you are doing and you trust the source. Apps from forums, ad-driven download sites, and "free premium" pages are almost always laced with something.

Want to be extra safe?

• Set up Screen Time (iPhone) or Family Link (Android) for older relatives. They block installs without your approval.
• On iPhone, turn off "Installing Apps" in Screen Time for the device you give to a parent or kid.
• Review installed apps every few months. Delete what you do not use.