Most bad apps announce themselves — if you know where to look. Run anything suspicious through this checklist before it touches your phone.
The checklist
- Check the developer, not just the app. Tap the developer name in the store. One app and a Gmail address? Caution. A track record of apps with steady updates? Better.
- Read the 1-star and 3-star reviews. Five-star reviews are easily bought; the middle and bottom tell you about ads, scams, and what broke.
- Look at the permission list before installing. A wallpaper app wanting your contacts and SMS is telling you its real business.
- Check the download-to-review ratio. Millions of downloads with a handful of reviews (or reviews that all sound alike, posted the same week) is a manipulation pattern.
- Search the app name + “scam” / “safe”. Thirty seconds on Google surfaces what victims already learned the hard way.
- Check the last update date. Abandoned apps accumulate unpatched security holes.
- Never sideload “premium unlocked” versions. Modded APKs are the single most common malware delivery method on Android.
- Watch what it asks for after install. Login walls for platforms it doesn’t need? Accessibility permissions with no accessibility feature? Uninstall.
The permission that should always stop you cold: an app asking you to type another platform’s password directly into it. That’s a credential trap, full stop — here’s how that scam works.
Special caution categories
Some app genres are majority-bad by design: free follower tools (covered here), “who viewed my profile” apps (the platforms don’t expose that data, so every such app is lying), cleaner/booster apps, and free VPNs with no clear business model — if the VPN is free, your browsing data is usually the product.
Is the Play Store / App Store enough protection?
It filters the worst, but scam apps get through constantly — store review is a speed bump, not a guarantee. The checklist above catches what slips past.
What about APK sites?
Installing from random APK sites removes even the store’s speed bump. Unless you deeply trust the source, don’t.
