{"id":677657,"date":"2026-05-18T14:56:27","date_gmt":"2026-05-18T14:56:27","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/677657\/"},"modified":"2026-05-18T14:56:27","modified_gmt":"2026-05-18T14:56:27","slug":"play-protect-is-not-doing-enough-to-protect-us-from-dodgy-apps","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/677657\/","title":{"rendered":"Play Protect is not doing enough to protect us from dodgy apps"},"content":{"rendered":"<p><img class=\"e_rg\" decoding=\"async\" loading=\"eager\"  title=\"Google Play Protect Apps scanned\"  alt=\"Google Play Protect Apps scanned\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/10\/Google-Play-Protect-Apps-scanned-scaled.jpg\"\/><\/p>\n<p>Aamir Siddiqui \/ Android Authority<\/p>\n<p>An elderly relative, a gullible friend, or someone who just isn\u2019t all that tech-savvy: we all have those people who make us wish that there were <a href=\"https:\/\/www.androidauthority.com\/i-need-reverse-android-parental-controls-mom-dad-3662353\/\" rel=\"nofollow noopener\" target=\"_blank\">reverse parental controls<\/a> on Android. The reality is that complicated UIs combined with malicious actors are making it easier than ever for scams and dodgy apps to target people who don\u2019t always have their guard up.<\/p>\n<p>Google\u2019s Play Protect service is meant to defend users of the Play Store from malicious applications. But when my boyfriend\u2019s grandmother asked me to help her with her <a href=\"https:\/\/www.androidauthority.com\/best-android-phone-3563254\/\" rel=\"nofollow noopener\" target=\"_blank\">Android phone<\/a>, I realized that the service is failing to identify these apps.<\/p>\n<p>Do you think Play Protect does enough to identify malicious apps?<\/p>\n<p>35 votes<\/p>\n<p>Yes.<\/p>\n<p>11%<\/p>\n<p>No.<\/p>\n<p>60%<\/p>\n<p>It depends on the type of app.<\/p>\n<p>29%<\/p>\n<p>Apps requesting excessive permissions target unwitting users<\/p>\n<p><img class=\"e_rg\" decoding=\"async\" loading=\"lazy\"  title=\"google play store changelog 1\"  alt=\"google play store changelog 1\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/01\/google-play-store-changelog-1.jpg\"\/><\/p>\n<p>Andy Walker \/ Android Authority<\/p>\n<p>While Google is introducing a <a href=\"https:\/\/www.androidauthority.com\/google-android-sideloading-unverified-apps-new-rules-3650343\/\" rel=\"nofollow noopener\" target=\"_blank\">new sideloading process<\/a>, I think that if the company is serious about reducing scams on Android, <a href=\"https:\/\/www.androidauthority.com\/play-store-more-scams-than-sideloading-3652203\/\" rel=\"nofollow noopener\" target=\"_blank\">it needs to look at the Play Store<\/a>.\u00a0I\u2019ve heard multiple instances of people being tricked into installing dodgy apps through ads. These ads pose as system notifications and lead the user to a Play Store listing to download the app under the guise that it\u2019s providing an essential feature or update. In reality, it\u2019s just a vector to deliver more ads to generate revenue for the developers.<\/p>\n<p>For example, my colleague Andy mentioned that his father tapped on an ad for a so-called critical update and ended up installing different PDF apps, which delivered more ads for more downloads.<\/p>\n<p>When I was visiting my boyfriend\u2019s grandmother, she complained of the incessant ads she was receiving on her phone. She kept receiving messages that she needed a new PDF reader or that her phone didn\u2019t have enough space. She wasn\u2019t sure what had caused the change; she just noticed one day that her UI had completely changed.<\/p>\n<p>I told my boyfriend to help her run a malware scan on her phone. He had tried to help her before but wasn\u2019t sure how to identify the app that was causing issues. He used Samsung\u2019s Device Care app to scan the phone, and it identified one app with excessive ads. However, even after uninstalling it and receiving a clean scan, her UI had still not reverted to the original.<\/p>\n<p>They handed me her phone to see if I could find the issue, which is when I realized that this wasn\u2019t a simple case of an app delivering pop-ups. Rather, she had an entirely different launcher on her phone that replaced her app drawer, widgets, and Google Discover feed. Even searching for apps in her app drawer brought up additional ads. Meanwhile, the widget posing as Google Search displayed even more ads.<\/p>\n<p>It\u2019s also likely that this app was using her search data for more targeted ads. Although she wasn\u2019t sure what she had done to cause the issues on her phone, the app had managed to get her to grant a significant number of permissions that compromised her data and her experience.<\/p>\n<p>Despite this, Google Play Protect didn\u2019t identify the culprit<\/p>\n<p><img class=\"e_rg\" decoding=\"async\" loading=\"lazy\"  title=\"no harmful apps found notification on google play protect\"  alt=\"no harmful apps found notification on google play protect\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/no-harmful-apps-found-notification-on-google-play-protect-scaled.jpg\"\/><\/p>\n<p>Megan Ellis \/ Android Authority<\/p>\n<p>I decided to use Google Play Protect to scan for the culprit, thinking it would be the best choice to identify problematic apps. But the service didn\u2019t find any issues with the device. While Play Protect scans for malware, it\u2019s also supposed to identify adware. The warning that\u2019s typically displayed is, \u201cThis app may display ads with unexpected behaviors (for example, outside the app environment, cannot be easily dismissed, or interfering with device functionality).\u201d However, the app continued undetected.<\/p>\n<p>Eventually, I could get an idea of which app was causing the issue since I kept seeing a prompt to change the default messaging app when swiping to the left-most screen. Notably, trying to search for the app didn\u2019t bring it up in the app drawer. When I long-pressed the app icon on the home screen, the pop-up to uninstall it didn\u2019t appear.<\/p>\n<p>Play Protect failed on two fronts: it didn&#8217;t identify the app as adware before it appeared on the Play Store, and its scan didn&#8217;t identify the app as problematic after install.<\/p>\n<p>In my opinion, Google\u2019s Play Protect service had failed on two fronts. It failed to identify the app as <a href=\"https:\/\/developers.google.com\/android\/play-protect\/mobile-unwanted-software\" target=\"_blank\" rel=\"noopener nofollow\">Mobile Unwanted Software<\/a> when it was approved on the Play Store. While its app name was simply \u201cMessages,\u201d its main purpose was to replace the phone\u2019s launcher and display ads. Its permissions give this away as it differs from other messaging apps due to its permission for widgets.<\/p>\n<p>Play Protect then failed a second time to identify the app as adware when it was on my boyfriend\u2019s grandmother\u2019s device. While free launchers often display ads, there were more ads than I\u2019ve ever seen in any launcher. Often these ads are limited to the launcher settings. But with this app, they were part of most menus on the device.<\/p>\n<p>How I managed to fix the phone\n<\/p>\n<p>When I kept receiving the prompt to change the default messaging app, I realized that the guilty software was posing as a texting app. Trying to uninstall it from the home screen or app drawer didn\u2019t work, so I decided to head to the Google Play Store.<\/p>\n<p>There is a way to check what app is acting as your phone\u2019s launcher, but this setting is somewhat buried. Searching for \u201chome\u201d or \u201clauncher\u201d won\u2019t bring it up. Rather, you have to go to Settings &gt; Apps &gt; Default apps &gt; Home app (the exact steps will depend on your Android skin).<\/p>\n<p>Since I hadn\u2019t changed a launcher in around a year, I completely forgot about these steps. So instead, I used the Google Play Store\u2019s account menu to manage the installed apps on the device. To do this, I went to the Google Play Store, selected the account icon at the top right of the app, then selected Manage apps and device &gt; Manage. I made sure the filter was set to\u00a0This device so that I could see all the apps installed on the phone.<\/p>\n<p>I then scrolled through all the installed apps. This would\u2019ve been a more difficult task on a device with more apps, but luckily my boyfriend\u2019s grandmother didn\u2019t have that many installed. I actually nearly missed the app, since it had a generic \u201cMessages\u201d title and a chat blurb icon that looks similar to the <a href=\"https:\/\/www.androidauthority.com\/samsung-messages-end-of-service-3654928\/\" rel=\"nofollow noopener\" target=\"_blank\">discontinued Samsung Messages app<\/a>. Luckily, my boyfriend pointed out that this wasn\u2019t Samsung Messages, and I clicked on the app to see that it was, in fact, developed by another company.<\/p>\n<p>I used the manage apps menu in the Google Play Store to remove the offending app, which posed as a simple messaging utility.<\/p>\n<p>After uninstalling the app, the UI reset back to Samsung\u2019s default <a href=\"https:\/\/www.androidauthority.com\/one-ui-9-leak-ui-and-settings-changes-3656907\/\" rel=\"nofollow noopener\" target=\"_blank\">One UI<\/a>, and my boyfriend\u2019s grandmother had control over her device once again.<\/p>\n<p>I\u2019ll never know what ad convinced her to download the app in the first place. But when I did a quick search of the Google Play Store, I saw that it\u2019s filled with messaging apps that promise dubious functionality. Some claim to save battery power, and I even spotted one that promised to allow you to receive SMSes without internet \u2014 even though you don\u2019t need an internet connection for SMSes.<\/p>\n<p><img class=\"e_rg\" decoding=\"async\" loading=\"lazy\"  title=\"free apps on the google play store\"  alt=\"free apps on the google play store\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/11\/free-apps-on-the-google-play-store-scaled.jpg\"\/><\/p>\n<p>Megan Ellis \/ Android Authority<\/p>\n<p>I eventually tracked down the same app that she had installed on her phone \u2014 an app with no reviews and around 10k downloads. It has since updated its app title to include the fact that it\u2019s also a launcher, but it keeps its description vague enough that non-tech-savvy users will\u00a0 think that they\u2019re installing a messaging app. I temporarily installed the app and can see how my boyfriend\u2019s grandmother likely granted the extra permissions, as the app spams you with prompts to enable certain features. It makes it extremely easy for someone who doesn\u2019t know what a launcher even is to install one and activate it.<\/p>\n<p>The same company also makes a QR code scanner that is also a launcher, confirming my belief that the launcher functionality is just a vector to deliver more ads. Neither messaging apps nor QR code scanners require launcher functionality to work, create shortcuts, or enable widgets. In addition, these utilities already exist in Android. But it\u2019s common for adware to pose as utility apps, even if they\u2019re not actually necessary on modern Android devices.<\/p>\n<p> Don\u2019t want to miss the best from Android Authority?<\/p>\n<p><a href=\"https:\/\/andauth.co\/AAGooglePreferredSource\" class=\"e_pn\" target=\"_blank\" rel=\"noreferrer nofollow noopener\"><img class=\"e_rg\" decoding=\"async\" loading=\"lazy\"  title=\"google preferred source badge light@2x\"  alt=\"google preferred source badge light@2x\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/01\/1768233971_656_google_preferred_source_badge_light@2x.png\"\/><img class=\"e_rg\" decoding=\"async\" loading=\"lazy\"  title=\"google preferred source badge dark@2x\"  alt=\"google preferred source badge dark@2x\" src=\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/01\/1768233972_401_google_preferred_source_badge_dark@2x.png\"\/><\/a><\/p>\n<p>I don\u2019t expect the Google Play Store and Play Protect to predict every possible exploit by dodgy developers. But apps getting excessive permissions under the guise of providing a simple function, only to deliver ads or other malware, is a common issue.<\/p>\n<p>There is friction in the sideloading process, with warnings about installing unknown apps. Yet it\u2019s seamless to grant apps excessive permissions if they come from the Play Store. Play Protect is meant to identify apps with excessive permissions, but this functionality seems too easy to get past.<\/p>\n<p>Plenty of Android users aren\u2019t extremely tech-savvy. My boyfriend had tried to fix his grandmother\u2019s phone before, but wasn\u2019t sure where to start. It shouldn\u2019t take an interaction with a tech journalist to flag dodgy apps. Even my Linux loyalist father, who spent decades as a systems administrator, managed to switch his Google Maps audio navigation to Indonesian with no idea how to switch it back.<\/p>\n<p>The reality is that most users install apps without knowing everything they do, and even those of us who are relatively knowledgeable can mess up at times. The Play Store shouldn\u2019t let it be so easy to target those of us who aren\u2019t constantly on guard.<\/p>\n<p>Thank you for being part of our community. Read our\u00a0<a class=\"c-link\" href=\"https:\/\/www.androidauthority.com\/android-authority-comment-policy\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-stringify-link=\"https:\/\/www.androidauthority.com\/android-authority-comment-policy\/\" data-sk=\"tooltip_parent\">Comment Policy<\/a> before posting.<\/p>\n","protected":false},"excerpt":{"rendered":"Aamir Siddiqui \/ Android Authority An elderly relative, a gullible friend, or someone who just isn\u2019t all that&hellip;\n","protected":false},"author":2,"featured_media":677658,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[1121,49,48,194,190,61],"class_list":["post-677657","post","type-post","status-publish","format-standard","has-post-thumbnail","category-mobile","tag-android","tag-ca","tag-canada","tag-google-play-store","tag-mobile","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/677657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=677657"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/677657\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/677658"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=677657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=677657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=677657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}