Domains, platforms, and web abuse
Fake app / impersonation app
A fake app is a mobile application, in an official store or offered for sideloading, that copies a brand's name, icon or interface to steal logins, card details or money, or to install malware.
How they reach users
Some reach official stores by mimicking a brand that has no app of its own, or by shipping a clean version and changing it later. Many more are distributed outside the stores: a smishing message or a phishing page offers a direct download, sometimes with instructions for bypassing the device's install warnings. Search adverts for the brand name are another route.
What they do
- Present a cloned login screen and forward the credentials.
- Ask for card details to pay a fee or unlock a feature.
- Request permissions that allow reading SMS, including one-time codes, or overlaying other apps.
- Install a second payload after approval, so the store listing looks benign.
Monitoring and removal
Store monitoring searches the official stores for the brand name, logo and common misspellings and compares new listings with the brand's genuine publisher account. Removal goes through the store's impersonation or intellectual-property process, which asks for the listing URL, the rights being claimed and the genuine app. For sideloaded apps, the target is the hosting page and the domain serving the download, handled as a phishing takedown.
Related terms
Sources
External guidance is general. Adapt it to your legal, regulatory and operational requirements.