28 Fraudulent Android Apps on Google Play Offer Fake Call History Access, 7.3 Million Downloads

Security researchers uncovered 28 fraudulent applications on the official Google Play Store that falsely advertised access to call histories for any phone number. The apps collectively amassed more than 7.3 million downloads, with one app alone accounting for a significant portion of that figure. Users were lured into subscribing to services that promised real call history data, but the data delivered was fabricated. The subscriptions incurred real financial loss for unsuspecting Android users. Google Play identified the apps as malicious and removed them from the store, but the damage had already been done. The scam exploited users’ privacy concerns and the lack of stringent verification for data‑access claims. The incident highlights the need for vigilance when installing third‑party apps that request sensitive permissions.

The fraudulent apps were discovered during routine security scans and were flagged for their deceptive behavior. They requested call history permissions but did not provide legitimate access, instead offering a subscription that delivered fake data. The financial impact was significant, with users paying for services that did not deliver. Google Play’s removal of the apps mitigated further spread, but users who had already installed them remain at risk. The incident serves as a reminder to verify app authenticity and to be cautious of subscription offers that promise sensitive data.

Overall, the scam demonstrates how malicious actors can exploit platform trust to defraud users, and it underscores the importance of continuous monitoring and user education on app security.