Android alert: 7 million users downloaded ‘stalking’ apps that were actually scams

Android alert: 7 million users downloaded ‘stalking’ apps that were actually scams

Android alert: 7 million users downloaded ‘stalking’ apps that were actually scams

https://www.tomsguide.com/computing/online-security/android-alert-7-million-users-downloaded-stalking-apps-that-were-actually-scams

Publish Date: 2026-05-08 17:30:00

Source Domain: www.tomsguide.com

Normally, when it comes to scams, there is clearly a bad party and it’s usually the grifter. However, a new scam uncovered by security researchers at ESET lands squarely in the everyone is probably wrong zone.

The scam involves a series of 28 apps dubbed “CallPhantom” by ESET that racked up more than 7.3 million downloads on the Google Play Store. The various apps promised to give users access to call histories, SMS records and even WhatsApp call logs for any phone number.

Latest Videos From

You may like

Some of the apps demanded users’ email addresses where the fake call history would supposedly be sent. However, no “data” would be sent until after payment.

Surprisingly, none of the apps requested intrusive permissions on the scammed individual’s phone.

Payments to the apps were split up as well. Some relied on the Google Play Store’s official billing system, which is required for apps that offer in-app purchases. Some utilized third-party payments or had payment card checkout forms that side-stepped Google’s policies though.

ESET says that it submitted its report about the CallPhantom apps to Google in December 2025, and all of the apps in question have since been removed. Browsing the Play Store today, we were unable to find any evidence of these apps.

How to stay safe from malicious apps

A hand holding a phone securely logging in

(Image credit: Google)

Look, obviously, no one deserves to be scammed. That said, when you go looking for sketchy apps that promise to…

Source