Mobile applications

Types of fake mobile apps, and how to spot them.

Fake mobile apps copy a brand's name, icon and screens to steal logins, codes and payments, or to push scams. Here's what they look like, where they're downloaded from and how organisations get them taken down.

See mobile app protection Request a takedown

Anatomy of a fake app listingExample

SSolstice Pay Wallet+1by Solstice Digital Ltd2

Download fromget-solsticewallet.click · APK file3

This app canRead your text messages · Use accessibility · Draw over other apps4

Download APK · 24 MB

1
An extra wordPlus, Wallet, Pro or Lite makes it look like an add-on to the real app.
2
Not your developerA name close to yours, but not the account that publishes your real app.
3
Not an official storeA download site or third-party store, so none of Apple's or Google's checks.
4
Risky accessTexts and screen access let it read one-time codes and see what people type.

Tap a numbered part of the listing to see what it means.

What are fake mobile apps?

Your app, copied outside the stores you control.

A fake mobile app uses a real brand's name, icon or screens without permission. Some are repackaged copies of the real app with something harmful added. Others are new apps built to look official. Most are spread through third-party app stores, APK download sites and links in ads and messages, rather than the official stores.

NameSolstice Pay

Iconsolstice-icon.png

Packagecom.solsticepay.app

Copy

The real app is taken apart.

The app's name, icon, screenshots and sometimes its code are downloaded and repackaged, often with something harmful added.

Solstice Pay Wallet+Third-party store · APKUploaded by Solstice Digital Ltd

List

It goes up where you don't look.

The copy is listed on third-party app stores, APK sites and download pages, often in several languages at once.

Solstice PayYour app version is no longer supported. Update now: get-solsticewallet.click

Promote

Links push people to install it.

Texts, ads and social posts send people to download it, usually with an update warning or a bonus for switching.

One-time code readFrom the text message inbox

Login capturedAccount emptied overnight

Steal

Logins and codes go out.

Once installed, it collects logins, one-time codes and card details, or shows scam offers. When one is removed, the next goes up.

Types of fake mobile apps

Eight ways your app gets copied.

Some are copies of your real app, others are new apps or download pages using your name. Pick one to see how it works.

Solstice PaySolstice Pay Mobile

4.1 rating1K+ downloadsv8.2.1

Third-party app store · also in 6 languages

Install

Third-party store copies

Your app, or something that looks just like it, listed on app stores you've never published to.

How it works: the listing copies your name, icon, screenshots and description. It's often re-uploaded under several languages and versions, so one report rarely clears them all.

Watch forStores you don't useUnknown developerSame app, many languages

Mobile App Protection →

apkfree-download.net/solstice-pay-mod

Solstice Pay APK v8.2.1 (Mod, unlocked)Free download for Android. No account limits. Fast mirror, 24 MB.Download APK →

APK download sites

Sites offering the Android install file for your app, outside any store.

How it works: the file may be an old version, a modified one with features "unlocked", or one with malware added. People sideload it, skipping every check the official stores make.

Watch forModded or unlockedDirect APK filesMirror links

Mobile App Protection →

get-solsticewallet.click

Get the new Solstice Pay appOur app has moved. Download the latest version to keep your account and claim a $20 welcome bonus.Download for Android →

Fake download pages

Single pages built only to get people to download a fake app, often on cheap endings like .click.

How it works: the page looks like your website and says the app has moved or needs an update. They're set up in batches with generic names, so many don't include your brand in the address at all.

Watch for.click and other cheap endingsThe app has movedBonus for downloading

Mobile App Protection →

Shown over the real Solstice Pay app

Verify your accountTo keep using Solstice Pay, confirm your card details.Card numberExpiry · CVVConfirm

Malicious clones and overlays

Repackaged copies of a real app with code added to steal details, or apps that draw a fake screen over the real one.

How it works: the app asks for accessibility or "display over other apps" access. When the real app opens, a fake login or card form appears on top, and what's typed goes to the scammer.

Watch forAccessibility requestsDraw over other appsSudden verify screens

Mobile App Protection →

S+

Solstice Pay Rewards+SP Rewards Studio

4.6 rating500+ downloadsNew

Earn double points on every Solstice Pay purchase

Install

Fake companion apps

New apps that claim to work alongside yours, like a rewards tracker, wallet or "Plus" version.

How it works: the extra word makes it feel like an official add-on. It asks people to log in with their real account details, then uses them or sells them on.

Watch forPlus, Pro, Wallet or RewardsLog in with your accountDouble points offers

Mobile App Protection →

Solstice Pay LiteSolstice Apps Dev

3.2 rating50+ downloadsUpdated last week

Official app store · developer not Solstice Pay

Install

Fakes in official stores

Copies that get through the checks on the official app stores. Rare, but they happen.

How it works: the app looks harmless when reviewed, then changes after an update, or uses a developer name close to yours. Few downloads and a recent upload date are common giveaways.

Watch forDeveloper name not quite rightFew downloadsLite or Pro versions

Mobile App Protection →

Solstice PayText message

Your Solstice Pay app is no longer supported and your account will be paused. Install the new version: get-solsticewallet.click

Download links in texts and ads

Texts, social ads and posts that send people straight to a fake app or download page.

How it works: the message says the app must be updated, the account will be paused or there's a bonus for switching. The link skips the official store, so the person installs the fake directly.

Watch forUpdate links by textAccount will be pausedInstall from a link

Smishing and vishing →

Solstice Invest ProSolstice Capital Apps

4.8 rating5K+ downloadsAPK

Earn up to 3% a day. Withdraw anytime.

Start earning

Fake rewards and investment apps

Apps using a brand's name to promise bonuses, free credits, winnings or daily returns.

How it works: early balances look great, but withdrawing needs a deposit, a fee or more money in. The brand name on the app makes it feel safe until the money is gone.

Watch forDaily returnsPay to withdrawFree credits for sign-up

Scam Protection →

In the data

What fake apps look like right now.

Patterns from the fake apps and app download sites we handled for our clients in the first half of 2026.

92%

of the fake apps and app download sites we pursued were confirmed taken down

97%

of fake app listings were on third-party stores, not the App Store or Google Play

57%

of fake app download sites used the .click ending

71%

were download pages pushing an app, not store listings

Where the fake apps were found

Fake download pagesget-solsticewallet.click71%
Third-party stores and APK sitesapkfree-download.net28%
Official app storesSolstice Pay Lite1%

Fake listings turned up on stores like Aptoide, APKPure and Softonic, often re-uploaded in several languages so one report doesn't clear them all.

Source: Unphish cases opened January to June 2026 involving fake mobile apps, app store listings and app download sites. Example names are illustrative. Figures are rounded.

Why fake apps work

An app icon feels official. That's the problem.

People trust what's on their phone. A familiar name and icon are enough for most to tap install, and once a fake is on the device it can see far more than a fake website can.

It sees more than a website

With access to texts, notifications or the screen, a fake app can read one-time codes and capture what people type.

It stays on the phone

A phishing page is visited once. A fake app sits next to the real ones and can keep asking for details for weeks.

Your brand takes the blame

Customers remember whose name was on the app. Complaints, refunds and support calls land with you.

$2.18bn

reported lost to scams in Australia in 2025. Fake apps and download links are one of the ways scammers get onto people's phones.

Source: NASC Targeting Scams report, 2026

Fake app download sites

Download sites come in batches.

Fake app pages are set up several at a time on cheap endings, often with generic names that never mention your brand. Searching for your name misses most of them, so they need to be found by what they share and removed together.

Generic names like spin, cash or launch on .click
The same page design and the same app file
Your app's icon and screenshots copied across them all
Links shared in the same texts and ads

Explore threat intelligence →

One app file, many download sitesExample

Posing asSolstice Pay app download

Site
spin-cashlaunch.clickSame app file, no brand in the address
Removed
Site
luckyway-app.clickSame page design
Removed
Site
get-solsticewallet.clickLinked from a fake update text
Removed
Store
Solstice Pay Wallet+Third-party store listing
Reported

57%of download sites used .click

71%were download pages, not listings

1campaign view, pursued together

Use case

How teams use Unphish to stop fake apps.

Fake apps sit in places your team doesn't check every day. Unphish watches third-party stores, APK sites and download pages for your app's name and icon, proves they're fake and gets them removed, including the listing and the site hosting the file.

See Mobile App Protection →Book a demo

Mobile and product

Only the real app in people's hands.

We find copies of your app on stores and sites you've never published to.

Security

Fakes removed before they collect logins.

We check each one, capture the evidence and handle the takedown reports.

Fraud

Fewer stolen codes and account takeovers.

We take down the download sites and links pushing fake apps to your customers.

Customer support

Fewer "I downloaded your app" calls.

We give you live status on every fake, so you know what's still out there.

In practice

A copy of your app appears on a third-party store, with a .click site pushing downloads.

What Unphish doesWhat your team sees

01
Spotted
The listing using your app's name and icon, and the download site linking to it, are picked up and scored.
Sees an alert in the Threat Feed.
02
Checked
An analyst confirms the developer isn't you and captures the listing, package name, screenshots and download links.
Gets the evidence pack and approves enforcement in one click.
03
Taken down
Reports go to the app store, the site's host and its registrar, and are escalated until removed.
Follows live status in the Enforcement Centre. No forms to fill in.
04
Linked
Sites and listings sharing the same app file, design or links are grouped into one campaign and removed together.
Follows the whole campaign behind the sites.
05
Reported
Removal is verified and new uploads and download sites using your app are watched for.
Gets reporting for security, product and leadership.

Case study · Casino and entertainment group

95%

of the fake app sites and listings using the group's name were confirmed taken down between April and June 2026.

The fakes offered the group's gaming app for download outside the official stores, with copies re-uploaded to third-party stores and new download sites set up in batches.

See Mobile App Protection →

65%

Didn't use the brand's nameGeneric addresses meant searching for the brand alone would have missed most of them.

51%

Used the .click endingCheap and quick to register, so new sites appeared in groups.

84%

Weren't on .comSpread across cheap endings and third-party app stores.

Client name withheld to protect confidentiality.

Jargon, decoded

The fake app terms worth knowing.

The words mobile, security and fraud teams use, in plain English.

Sideloading: Installing an app from a website or file instead of an official app store.
APK: The file used to install an Android app. Easy to copy, change and share outside the stores.
Third-party app store: Any app store that isn't Apple's App Store or Google Play, with lighter or no checks.
Repackaged app: A real app that's been taken apart, changed and rebuilt, often with harmful code added.
Overlay attack: A fake screen drawn over a real app to capture logins or card details as they're typed.
Risky permissions: Access to texts, notifications, accessibility or the screen that a fake app can misuse.
Developer account: The account an app is published under. A fake uses a name close to the real company's.
Package name: The unique ID behind every app. A different one means a different app, whatever the icon says.

Warning signs

How to spot a fake app.

A real-looking example

Solstice Pay Wallet+by Solstice Digital Ltd150+ downloads · uploaded 3 days ago2

Download APK from get-solsticewallet.click3

This app needs: read your SMS, accessibility, draw over other apps4

New version! Log in with your Solstice Pay details to move your balance.5

★★★★★ "Best app!!" · 12 reviews, all today6

1
A developer that isn't youThe name is close, but it's not the account that publishes the real app.
2
Few downloads, very newA copy of a well-known app with a handful of installs and a fresh upload date.
3
Not an official storeA download site or APK link instead of the App Store or Google Play.
4
Risky permissionsA payments or shopping app has no reason to read texts or control the screen.
5
Log in to "move" your accountReal updates don't ask you to re-enter your details in a new app.
6
Reviews that look copiedLots of five-star reviews posted at once, with the same few words.

Checklist for your team

Fake app using your brand? Here's what to do.

Fake apps get re-uploaded and new download sites appear quickly, so the first few steps matter most.

0 of 5 done

Tap each step to tick it off.

If customers lost money or data, report it

ReportCyber ↗Scamwatch ↗IDCARE ↗

Want us to handle it? Request a takedown →

For your customers

Help customers find the real app.

Two short notes you can adapt for your website, store listing, emails or support scripts. One shows people how to get the real app. The other tells them what to do if they've installed a fake.

The copied version leaves blanks for your company name and official details.

Solstice PayCustomer notice

How to get the real Solstice Pay app

Only download from the App Store or Google Play, using the links on solsticepay.com.
Check the developer is Solstice Pay. Anything else isn't us.
We'll never text or email you a download link or ask you to install an update from a website.
Our app never asks to read your texts or control your screen.
Not sure? Search for us in the official store rather than following a link.

Seen a fake? Report it at solsticepay.com/report

Example

Solstice PaySupport team

Installed a fake app?

Delete the app straight away.
Call your bank if you entered card details, to block the card.
Change your password using the official app or website.
Check your account for payments or changes you don't recognise.
Tell us where you found it, so we can get it taken down.

Reporting it helps us stop it reaching anyone else.

Example

How Unphish stops it

Get the fakes taken down.

Unphish finds the store listings, APK sites and download pages using your app's name and icon, proves they're fake and gets them removed. Then we keep watching for re-uploads and new sites.

Every case checked by an analyst before a report is sent
Reports sent to app stores, hosts and registrars for you
Sites and listings from the same campaign removed together

See mobile app protection →

Case · Fake app download siteExample

Solstice Pay Wallet+get-solsticewallet.click

App icon and screenshots copied

Linked from texts to customersOur app has moved. Download the latest version to keep your account.

Taken down

DetectedDownload page using the app's name and icon
Evidence capturedPage, app file and the texts linking to it
Confirmed by an analystFake app collecting logins and codes
Reported to host and registrarEvidence-backed takedown request
Linked sites foundSame app file on two more .click sites, reported too
Removed and watchedRemoval verified, re-uploads monitored

FAQ

Fake app questions, answered.

What is a fake mobile app?

A fake mobile app uses a real brand's name, icon or screens without permission, usually to steal logins, one-time codes or card details, show scam offers or install malware. Some are repackaged copies of the real app, and others are new apps built to look official.

Where are fake apps usually found?

Mostly outside the official stores. In the first half of 2026, 97% of the fake app listings we handled were on third-party app stores rather than Apple's App Store or Google Play, and most fakes were spread through download sites linked from ads and messages.

What is an APK, and why is it risky?

An APK is the file used to install an Android app. Installing one from a website or message, called sideloading, skips the checks the official store makes, so a fake or modified app can get onto the phone and ask for access to texts, notifications or the screen.

How can I tell if an app is real?

Download from the official store using the link on the brand's own website, and check the developer name matches the company. Be wary of extra words like Plus, Pro or Wallet, few downloads, download links sent by text or ads, and apps that ask for access to your texts or screen.

Can fake apps be taken down?

Yes. App stores, hosting providers and registrars remove fake apps and download sites when they're given evidence. Some third-party stores are slower to respond, so how long it takes depends on the store and the case. In the first half of 2026, 92% of the fake apps and app download sites we pursued were taken down.

What should we do if we find a fake version of our app?

Don't install it on work devices to check. Save the listing link, developer name, package name and screenshots, then report it to the store or host, or request a takedown and our team will check it and handle the reports. Remind customers where to get the real app, and look for copies on other stores.

How can organisations protect customers from fake apps?

Link to your official store listings from your website, tell customers you'll never send app downloads by text, and watch third-party stores, APK sites and ads for your name and icon so copies can be removed quickly.

By industry

Fake apps in your industry.

Every sector gets copied in its own way. See the fake apps and download sites we find and take down in yours.

Banking and Financial Services

Fake banking apps and login overlays.

Fintech

Fake wallet and payment apps.

Crypto

Fake wallets and trading apps.

Retail and E-Commerce

Fake shopping and loyalty apps.

Airline and Transport

Fake booking and points apps.

Lottery and Gambling

Fake casino apps and APK download sites.

Public Sector and Government

Fake government service apps.

Non-Profit Organisations

Fake donation apps.

Film and Entertainment

Fake streaming apps and modded APKs.

Keep exploring

SolutionMobile App ProtectionFake apps and download sites, removed → SolutionPhishing ProtectionFake login pages, taken down → SolutionScam ProtectionFake offers and investment scams → Use caseSmishing and vishingThe texts and calls that push fake apps →

Try it

Real or fake?

Five apps and links that say they're from Solstice Pay, our example company. Its app is published by Solstice Pay and linked from solsticepay.com/app. Which would you trust?

The quickest check: get apps from the official store, using the link on the company's own website, and make sure the developer is the company.

How we take them down →

Found a fake version of your app?

Send us the store listing or download link. Our team checks it, captures the evidence and handles the takedown reports with the store, host and registrar.

Book a demo Request a takedown