- Install apps only from the official app store of your phone.
- Check the developer, reviews and permissions before installing.
- If you think the phone is infected, remove the app, change passwords and consider a reset.
The short answer
Fake apps copy the name and logo of real ones, and malware is software designed to steal data, spy on you or show unwanted adverts. Most infections come from apps installed outside the official stores or from links in messages. A few careful checks before every install keep you safe.
Where infections come from
- Apps downloaded from links in messages, adverts or social media.
- Files shared as installation packages outside the app store.
- Fake versions of popular apps, games and banking tools.
- Loan or “easy money” apps that ask for too many permissions.
- Links in phishing messages. See phishing emails and SMS scams.
Check before you install
- Use the official store and search for the app yourself rather than following a link.
- Check the developer name. Copycats often use slightly different spellings.
- Read reviews, especially the recent and critical ones.
- Look at the download count. A popular service with only a few downloads is suspicious.
- Review permissions. A torch app does not need your contacts or messages.
- Check when it was last updated and whether the company’s own website links to it.
Warning signs of malware
| Sign | What it may mean |
|---|---|
| Battery drains much faster | Something is running in the background |
| Phone gets hot when idle | Hidden activity |
| Data usage jumps | An app is sending data |
| Pop-ups and adverts everywhere | Adware |
| Apps you did not install | Unwanted software |
| Strange messages sent from your accounts | Account or device compromise |
These signs can have harmless causes, such as a failing battery, so look for several signs together.
What to do if you think you are infected
- Disconnect from Wi-Fi and mobile data if you suspect active spying.
- Uninstall apps you do not recognise or no longer trust. On Android, check Settings for apps with special access and remove it before uninstalling.
- Run the built-in scan, such as Google Play Protect on Android.
- Install system updates.
- Change passwords for important accounts from a clean device. Use a password manager and two-factor login.
- If problems continue, back up your photos and contacts and perform a factory reset. See how to back up your phone and laptop.
Stay protected
- Keep the phone and apps updated.
- Do not install apps from outside the official store.
- Be careful with QR codes and links. Read about QR codes.
- Use a screen lock and, where possible, two-factor login.
- Free up space and remove unused apps. See how to free up phone storage.
Loan and money apps
Fake or aggressive loan apps are widely reported in many countries. Some ask for access to contacts and photos and then pressure borrowers. Only use financial services that are properly licensed in your country, read the permissions and avoid any app that demands access it does not need.
Quick checklist
- Use the official app store only
- Check developer, reviews and downloads
- Review permissions
- Watch for battery, heat and data warning signs
- Update your phone and run a scan
- Back up before a factory reset
Key points to remember
A few seconds of checking can save you months of trouble. When in doubt, do not install. For more on staying safe from message scams, read our guide to phishing emails and SMS scams.
