DoubleVerify warns of ‘zombie’ Android app fraud surge
DoubleVerify warns of ‘zombie’ Android app fraud surge
https://itbrief.asia/story/doubleverify-warns-of-zombie-android-app-fraud-surge
Publish Date: 2026-01-29 21:15:00
Source Domain: itbrief.asia
DoubleVerify has issued a fraud alert about a mobile scam in which criminals hijack dormant Android developer accounts and use them to publish fraudulent gaming apps on Google Play.
The company said the pattern differs from earlier app store scams that relied on newly created developer accounts. Those accounts often attract heavier scrutiny from app store security systems and then disappear after enforcement action.
DoubleVerify said fraudsters have shifted towards taking over established accounts that have been inactive for months or years. The company described these as “zombie” accounts. It said the prior history of legitimate activity can allow fraudulent apps to pass automated checks that focus on reputation signals.
The company said the resulting apps generate invalid traffic that drains advertiser budgets. It also said many of the apps consume battery power excessively. The firm said this can harm devices on which the apps are installed.
Shift in tactics
DoubleVerify said fraudsters historically infiltrated app stores by creating new developer accounts and adding fake reviews and metadata. It said this approach has become harder to sustain because new accounts receive extra screening and can face rapid takedowns.
In the newer pattern, DoubleVerify said criminals compromise accounts with an existing publishing track record. It said the accounts then return from long periods of inactivity and release multiple gaming apps. The company described these games as generic and low-quality.
DoubleVerify said the published apps can serve intrusive or out-of-context ads. It said the apps can produce large volumes of ad requests that do not correspond with real gameplay.
The firm said it first uncovered the trend in 2025 and expects the activity to increase in the coming months. It also warned that advertisers that depend on app store protections alone may remain exposed.
Detection signals
DoubleVerify said it identified the scheme through patterns in…
