Skip to main content
Personal Business

Malicious apps

Scammers are sending prompts designed to convince you to download fake apps.

These apps are a type of malware. Malware, short for malicious software, refers to software that has been created to damage your device or steal your personal information.

They often look official at first but can secretly enable features that give access to your personal information, including your banking app login details.

This type of scam is particularly common on Android devices, but it can affect anyone. Find out how these scams work and how to protect yourself.

On this page:

A smart phone displaying a download in progress

Spot the signs of a malicious app

Step 1: You’re encouraged to download an app

You might see adverts on websites, emails, messages, or on social media. Sometimes these promotions come from scam emails or texts designed to look genuine. The app looks convincing and copies the design of a genuine one.

A smart phone displaying an App Store icon

Step 2: The app asks for unusual permissions

When you install the app, it may request access to unexpected parts of your phone, like the camera, accessibility settings, or administrator permissions. Scammers can use pop-ups to hide real screens and replace them with fakes ones, tricking you into granting these permissions.

You might also receive push notifications or be prompted to install an update that secretly downloads malware in the background.

Scammers can:

  • place fake login screens over real banking apps to steal details
  • display ‘busy’ or ‘waiting’ screens to hide activity
  • prevent you from closing the app or restarting your phone
A smart phone displaying an update in progress

Step 3: Harmful features activate in the background

Once installed, the app may secretly run in the background, carrying out harmful activities such as recording your screen or stealing your card details.

Your phone might also run out of battery more quickly due to the extra activity.

Step 4: Scammers gain control

With the information gathered, scammers can take over your accounts, access your device remotely, and steal money or personal data.

Someone using a smart phone with a warning icon displayed, suggesting there could be security issues.

How to avoid downloading a malicious app

Make it harder for scammers by:

  • only downloading apps from trusted sources like the App Store or Google Play Store

  • checking reviews and developer information before installing

  • keeping your device and apps up-to-date

  • being wary of apps requesting unnecessary permissions

  • looking out for unresponsive banking apps showing ‘busy’ messages

  • reporting any suspicious apps or activity to your bank immediately

Learn more

  • Take Five

    Take Five offers straightforward and impartial advice to help everyone protect themselves from fraud.

    Visit Take Five

  • Common fraud threats

    Find out more about common fraud threats and how to avoid them.

    Explore our common scam guides

Not found what you're looking for?

Contact our support team

Visit a branch
Call us