{"id":242016,"date":"2026-05-08T17:30:00","date_gmt":"2026-05-08T21:30:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/08\/android-alert-7-million-users-downloaded-stalking-apps-that-were-actually-scams\/"},"modified":"2026-05-08T19:35:07","modified_gmt":"2026-05-08T23:35:07","slug":"android-alert-7-million-users-downloaded-stalking-apps-that-were-actually-scams","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/08\/android-alert-7-million-users-downloaded-stalking-apps-that-were-actually-scams\/","title":{"rendered":"Android alert: 7 million users downloaded \u2018stalking\u2019 apps that were actually scams"},"content":{"rendered":"

Android alert: 7 million users downloaded \u2018stalking\u2019 apps that were actually scams<\/a><\/p>\n

https:\/\/www.tomsguide.com\/computing\/online-security\/android-alert-7-million-users-downloaded-stalking-apps-that-were-actually-scams<\/a><\/p>\n

Publish Date: 2026-05-08 17:30:00<\/a><\/p>\n

Source Domain: www.tomsguide.com<\/a><\/p>\n

Normally, when it comes to scams, there is clearly a bad party and it’s usually the grifter. However, a new scam uncovered by security researchers at ESET lands squarely in the everyone is probably wrong zone.<\/p>\n

The scam involves a series of 28 apps dubbed “CallPhantom” by ESET that racked up more than 7.3 million downloads on the Google Play Store. The various apps promised to give users access to call histories, SMS records and even WhatsApp call logs for any phone number.<\/p>\n

To gain access to this creepy information, users had to pay a subscription fee. Unfortunately for them, but perhaps fortunately for the people whose phone numbers they entered, these CallPhantom apps only sent back fake data.<\/p>\n

Latest Videos From<\/span><\/span><\/span>
\n
\n You may like
\n <\/span><\/p>\n

The ESET researchers found that the apps used different methods to fake the “information.” The apps would generate random phone numbers and match them with fixed names, call times and durations.<\/p>\n

Some of the apps demanded users’ email addresses where the fake call history would supposedly be sent. However, no “data” would be sent until after payment.<\/p>\n

Surprisingly, none of the apps requested intrusive permissions on the scammed individual’s phone.<\/p>\n

Payments to the apps were split up as well. Some relied on the Google Play Store’s official billing system, which is required for apps that offer in-app purchases. Some utilized third-party payments or had payment card checkout forms that side-stepped Google’s policies though.<\/p>\n

Get instant access to breaking news, the hottest reviews, great deals and helpful tips.<\/p>\n

ESET says that it submitted its report about the CallPhantom apps to Google in December 2025, and all of the apps in question have since been removed. Browsing the Play Store today, we were unable to find any evidence of these apps.<\/p>\n

How to stay safe from malicious apps<\/h2>\n

\n

\"A\n<\/p>\n

(Image credit: Google)<\/span><\/p>\n

Look, obviously, no one deserves to be scammed. That said, when you go looking for sketchy apps that promise to…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Android alert: 7 million users downloaded \u2018stalking\u2019 apps that were actually scams https:\/\/www.tomsguide.com\/computing\/online-security\/android-alert-7-million-users-downloaded-stalking-apps-that-were-actually-scams Publish Date:…<\/p>\n","protected":false},"author":1,"featured_media":242018,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/cdn.mos.cms.futurecdn.net\/4kkvJ8ctX6KiGrGncZ2zUa-2560-80.jpg","fifu_image_alt":"","footnotes":""},"categories":[46],"tags":[70,57],"class_list":["post-242016","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-google","tag-security"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/242016"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=242016"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/242016\/revisions"}],"predecessor-version":[{"id":242020,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/242016\/revisions\/242020"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/242018"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=242016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=242016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=242016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}