Piracy
Copied apps, mirror sites, leaked manuals and exposed code all take something that's yours and put it somewhere you don't control. Here's what each looks like, the warning signs, and how to get copies taken down.
About this fileAll features unlocked. No account or login needed.3 100% working.
Download APK (48 MB). Turn on "Install unknown apps" first.4
Tap a numbered part of the listing to see what it means.
How it works
Piracy rarely stops at one copy. Something is taken, repackaged, posted where people trust it, then copied again.
solsticepay-4.2.1.apkOps-Manual-v7.pdfsolsticepay.comTake
An app file, a website, a document or a code repository is downloaded or scraped from where it lives.
Repackage
Paid features are "unlocked", ads or trackers are added, or a site is rebuilt under a new address.
Post
Download sites, TV channel stores, file-sharing links, document libraries and code sites, often close to the real thing in search.
Spread
Other sites scrape the listing, mirrors appear when one is blocked, and people who install a changed copy blame you when it goes wrong.
Types of digital piracy
Some copies just take your traffic. Others are changed to steal logins or money. Pick one to see how it works.
Download sites that repost a brand's Android app file so people can install it outside the official store.
How it works: the site copies your listing, icon and screenshots and offers the file as a direct download. Even an unchanged copy misses your updates, and people can't tell if it has been tampered with.
Watch Solstice Pay events and offers on your TV. Free to add.
Unofficial apps and channels on smart TV and streaming device stores that use a brand's name and logo.
How it works: a third-party developer publishes a channel that looks official, sometimes several with small name changes. They're removed by the store under its copyright and trademark rules once ownership is shown.
Copies of an app that have been changed to unlock paid features or remove checks, then shared on mod sites.
How it works: the app is unpacked, edited and repackaged. The same process can add malware, trackers or a fake login screen, so a "free premium" app can end up stealing the account it was meant to unlock.
Copies of a brand's website on other addresses, presented as an official backup or local version.
How it works: mirrors are often promoted where the real site is blocked or hard to find. Some only send traffic elsewhere, others swap in their own login, payment or deposit pages.
Internal procedures, staff contacts and system screenshots.
Internal manuals, training material, reports and sales decks posted on public document-sharing sites.
How it works: a file is uploaded by a former staff member, a supplier or someone who found it. Search engines index it, and it can hand scammers the wording, contacts and screenshots they need to look real.
A brand's source code, internal tools or configuration files published in public code repositories.
How it works: code is pushed to a public repository by mistake or copied by a former contractor. It can include passwords, API keys or how internal systems work, so the keys need changing as well as the code removing.
Links to cloud storage and file-hosting services carrying a brand's paid content, internal files or app builds.
How it works: the file sits on a hosting service and the link is shared in forums, chats and comment threads. Removing the file at the host breaks every copy of the link at once.
Restreamed from the official broadcast with the logo cropped out.
Live events, shows or paid content restreamed or reposted on sites and channels that don't have the rights.
How it works: the stream is captured and rebroadcast, often wrapped in ads or pop-ups. Viewers get pushed to fake subscription or "verify your age" pages that ask for card details.
In the data
Copied apps, mirror sites, leaked documents and exposed code we pursued between January and June 2026.
of the piracy cases we pursued were confirmed taken down
of the copied apps we pursued on APK sites and TV channel stores were removed
were copies of a brand's own app, more than every other type combined
of the leaked documents and file-sharing links we pursued were removed
What was copied
57%17%13%13%Copied apps were spread across many download sites and TV channel stores at once. Removing every copy is what keeps them down.
Source: Unphish piracy cases (copied apps, mirror sites, leaked documents and exposed code) opened January to June 2026. Takedown rates exclude cases closed for other reasons, such as at the client's request. Example names are illustrative. Figures are rounded.
Why brands get copied
Popular apps, sites and content attract copies because people already trust the name. The brand carries the risk, even when it never published the copy.
People search for your app or content by name, so copies using it rank in search and get installed.
An app file, a website or a PDF can be copied in minutes and reposted on dozens of sites.
If a changed copy steals a login or spreads malware, customers remember whose logo was on it.
Australians pirated online content in 2022, across music, film, TV, live sport and games.
Source: Consumer Survey on Online Copyright Infringement 2022, Australian GovernmentLinked copies
When an app or site is copied, the same file usually turns up on several sites at once under slightly different names. Removing them together stops people finding the next one in search.
Use case
Copies of your app, site and content land with product, security and legal teams at once. Unphish finds them on download sites, channel stores, document libraries and code sites, proves they're unauthorised and gets them removed.
Only your app in people's hands.
We find copies of your app on download sites, mod sites and TV channel stores.
Fewer tampered copies and leaked keys.
We flag modified builds and exposed code, so keys can be changed fast.
Your content used only with permission.
We send copyright and trademark takedowns with the evidence attached.
Paid content stays paid.
We remove reposted manuals, courses, streams and file-sharing links.
The listings using your app's name, icon and screenshots are picked up and scored.
Sees an alert in the Threat Feed.
An analyst confirms they're unauthorised copies and captures the listings, publisher details and download links.
Gets the evidence pack and approves enforcement in one click.
Copyright and trademark reports go to each site and store with proof the app is yours, and are escalated until removed.
Follows live status in the Enforcement Centre. No forms to fill in.
Other listings from the same publisher or with the same file are grouped into one campaign and removed together.
Follows the whole campaign behind the listings.
Removal is verified and new uploads of the app are watched for.
Gets reporting for product, security and legal.
Case study · Airline group
100%
of the copies of the group's apps we pursued on download sites were removed between January and June 2026.
Unofficial copies of the group's booking, pay, wellbeing and in-flight entertainment apps were reposted on APK download sites and third-party app stores, outside the official stores and their security updates.
See Mobile App Protection →Client name withheld to protect confidentiality.
Jargon, decoded
The words product, security and legal teams use, in plain English.
Warning signs
A real-looking example
Listed on apkfree-hub.net, not Google Play or the App Store3
About this app: Premium unlocked, no ads, no login.4
Requires SMS, contacts and accessibility access.5
Slow download? Use our mirror link instead.6
Checklist for your team
Copies spread fast and come back under new names, so the first few steps matter most.
0 of 5 done
Tap each step to tick it off.
If customer data was exposed, report it
Want us to handle it? Request a takedown →
For your customers
Two short notes you can adapt for your website, app store pages, emails or support replies. One shows people where to get the real app. The other tells them what to do if they've installed a copy.
The copied version leaves blanks for your company name and official details.
How to get the real Solstice Pay app
Seen a copy? Report it at solsticepay.com/report
ExampleInstalled a copy of our app?
Then install the real app from the App Store or Google Play.
ExampleHow Unphish stops it
Unphish finds copies of your app, site and content on download sites, channel stores, document libraries and code sites, proves they're unauthorised and gets them removed. Then we keep watching for re-uploads.
Icon, screenshots and description copied from the official listing
FAQ
Digital piracy is copying or sharing someone else's content, software or files without permission. For a brand, that often means its app reposted on download sites, its website cloned as a mirror, or internal documents and code posted publicly.
Yes. Even an unchanged copy is outside your control: it won't get your updates, and people can't tell whether it has been tampered with. Modified versions can carry malware or strip out security checks, and customers blame the brand when something goes wrong.
A mirror site copies a real site, often to get around blocks or to send traffic somewhere else. A phishing site copies a login or payment page to steal details. Many mirror sites end up doing both, so they're treated as a takedown priority.
We confirm the content is yours and unauthorised, capture the evidence, and send a takedown request under the site's or platform's copyright, trademark or abuse rules. Requests are escalated if there's no response, and removal is confirmed.
It depends on the site or platform. App stores and large document sites usually act on a complete request, while smaller download sites can be slower and may need escalating to their host.
Save the link and note what's exposed, change any passwords, keys or tokens in it straight away, and ask the site or code host to remove it. If customer data is involved, check your reporting obligations.
No one can stop every copy, but finding copies early and removing them quickly limits how far they spread. Ongoing monitoring catches re-uploads and new mirrors as they appear.
By industry
Every sector gets copied in its own way. See the copies we find and take down in yours.
01
Airline and Transport
Copied booking, pay and in-flight entertainment apps.
02
Banking and Financial Services
Copied banking apps and leaked internal documents.
03
Crypto
Copied wallet apps and mirror sites.
04
Retail and E-Commerce
Copied shopping apps and cloned store sites.
05
Public Sector and Government
Unofficial copies of government apps and documents.
06
Lottery and Gambling
Mirror sites and modded betting apps.
07
Fintech
Repackaged apps and exposed code.
08
Non-Profit Organisations
Copied appeal pages and donation forms.
09
Film and Entertainment
Restreamed shows and reposted paid content.
Keep exploring
Try it
Five places offering Solstice Pay, our example company. Its app is published by Solstice Pay on the App Store and Google Play, and linked from solsticepay.com/app. Which would you trust?
The quickest check: get apps from the official store, from the brand's own publisher, and start from its website.
Send it to us. We'll confirm it's unauthorised, get it removed and keep watching for new copies.
