An app with the right name, the right icon, and a handful of glowing reviews can look completely legitimate in an app store search result — right up until it asks for a subscription no one remembers agreeing to, or quietly harvests more data than the real app ever would. App stores review submissions, but that review process has clear limits, and copycat apps are built specifically to slide through them. Here’s how these clone apps get published and stay up, and how to tell a real app from a convincing fake before installing it.
How the Scam Works
Step 1: The Lookalike Name, Icon, and Screenshots
A clone app copies the real app’s name closely (an extra word, a different suffix), reuses a near-identical icon and screenshots, and writes a description that mirrors the genuine app’s features and branding almost word for word.
Step 2: Getting Past App Store Review
The version submitted for review often behaves exactly as advertised, with no malicious functionality active yet, or with harmful behavior gated behind a server-side switch that gets flipped on only after the app has already passed review and reached real users.
Step 3: Fake Reviews and Inflated Download Counts
A cluster of positive reviews, often posted in a short window right after launch, and an artificially inflated download or install count make the clone look as trustworthy and popular as the real app it’s copying, encouraging more people to install it without checking further.
Step 4: Data Harvesting or Fake Subscription Traps
Once installed, the app requests excessive permissions unrelated to its stated function, pushes an aggressive auto-renewing subscription with a barely-visible cancel path, or quietly collects and sells personal data far beyond what the real app would ever need.
A Composite Example (Illustrative, Not a Real Case)
Imagine someone searches an app store for a popular crypto wallet and taps the first result, which has a nearly identical name and icon to the real app along with dozens of five-star reviews. After entering their wallet’s recovery phrase to “restore” their existing wallet inside the clone app, as it prompts them to do, their real wallet’s funds are transferred out within the hour. This scenario is a composite built from commonly reported patterns — it does not describe a real person, app, or event.
Red Flags That Get Missed
- A developer name that doesn’t match the real company, or a very recently created developer account with no other established apps.
- A small but noticeable difference in the app name or icon compared to what you remember or find on the real company’s official website.
- A cluster of reviews all posted within a short time window, especially right after the app’s release.
- Permission requests that don’t match the app’s stated purpose — a simple calculator app asking for contacts or location access, for example.
- Being asked to enter a wallet recovery phrase, seed phrase, or password directly into the app rather than through a secure, well-known restore process.
- A hard-to-find cancel button for a subscription, or a subscription price that only appears after the free trial has already started.
How to Protect Yourself
- Find the official app link from the company’s own website rather than searching directly in the app store, which surfaces clones alongside the real result.
- Check the developer name against the company’s official name, not just the app’s display name and icon.
- Read the most recent reviews, not just the overall star rating, since recent reviews are more likely to surface a subscription trap or data-harvesting complaint before it gets buried.
- Review requested permissions before and after installing, and deny or revoke any that don’t match what the app is actually supposed to do.
- Never enter a wallet recovery phrase, seed phrase, or master password into a newly installed app — legitimate wallet recovery happens through a verified process within the app you originally created the wallet in.
- Check your subscription list periodically in your phone’s app store settings, and cancel anything you don’t recognize or no longer use.
If You’ve Already Installed a Clone App
Uninstall the app immediately and check your phone’s subscription settings to cancel any recurring charge it created. If you entered a password, recovery phrase, or payment details, change those credentials right away and move any funds in an affected wallet or account to a new, secure one if possible.
Report the app to Google Play or the Apple App Store using their in-store “report” feature, which helps get it reviewed and removed faster, and report to your country’s official fraud authority:
- United States: FTC — reportfraud.ftc.gov, and the FBI Internet Crime Complaint Center (IC3) — ic3.gov
- United Kingdom: Action Fraud — actionfraud.police.uk or reportfraud.police.uk (0300 123 2040)
- Canada: Canadian Anti-Fraud Centre — antifraudcentre-centreantifraude.ca, report at reportcyberandfraud.canada.ca
- Australia: Scamwatch (National Anti-Scam Centre / ACCC) — scamwatch.gov.au, report at scamwatch.gov.au/report-a-scam
If you’re outside these countries, search for your national consumer protection agency or fraud reporting unit — most countries now have a dedicated online reporting channel.
Frequently Asked Questions
Does an app being on Google Play or the Apple App Store guarantee it’s safe?
No — app store review focuses mainly on technical policy compliance at the time of submission, and some malicious behavior is deliberately delayed until after an app has already passed that review and reached real users.
How can I find the real, official app instead of a clone?
Check the company’s own official website for a direct link to its app, rather than searching for it inside the app store, where a convincing clone can appear alongside or even above the genuine result.
Are a high star rating and lots of reviews proof an app is legitimate?
Not on their own — a cluster of positive reviews posted in a short window shortly after launch is a common sign of manufactured trust rather than genuine long-term user satisfaction.
Should I ever enter my wallet’s recovery phrase into an app?
Only within the exact wallet app you originally created it in, using its own verified recovery process — a newly installed app asking for a recovery phrase to “restore” or “verify” a wallet is one of the clearest signs of a scam.
What’s the fastest way to stop a clone app’s subscription charges?
Cancel the subscription directly through your phone’s app store account settings, not just by deleting the app, since uninstalling alone typically does not cancel an active subscription.
Browse more resources in our Scam Awareness category.