TL;DR: Which? warned in August 2026 about scam texts offering airline discounts, job offers or document renewals that lead to copycat websites pushing fake apps. The campaign impersonated more than 65 brands, including airlines like Ryanair, government services and retailers. Once installed, the apps can spy on your screen and switch on your microphone and camera. Only install apps from official stores via links on the company’s own website.
How it works
According to Which?:
- A text promises something useful: an airline discount, a job, a document renewal.
- The link goes to a copycat website for a well-known brand.
- The site pushes you to download “the app” directly, outside the official app store.
- The fake app can spy on your screen and activate your microphone and camera.
More than 65 brands were impersonated, including airlines such as Ryanair, government services and retailers.
Why it’s dangerous
A fake website steals what you type once. A fake app with screen access can watch everything: banking logins, one-time codes, private messages. It’s the difference between someone reading your postcard and moving into your spare room.
How to protect yourself
- Install apps only from Google Play or Apple’s App Store, and preferably via a link on the company’s own website.
- Never install an app from a link in a text.
- On Android, keep “Install unknown apps” turned off for your browser and messaging apps.
- Check the developer name before installing.
- Be suspicious of any “app” that asks for Accessibility or screen-recording permissions it doesn’t need.
Even official stores aren’t perfect: McAfee found 1,900+ fake apps on Google Play in 2026 (details).
If you installed one
- Disconnect from the internet.
- Uninstall the app (on Android, check Settings > Apps and remove device admin rights first if needed).
- Run a security scan; see removing spyware from Android.
- From a different device, change your banking and email passwords and call your bank or 159.
- Forward the original text to 7726 and report the site to the NCSC.
A free email exposure check shows if your details are in breach data used for these campaigns.
Frequently Asked Questions
Which brands were impersonated?
More than 65 brands, including airlines such as Ryanair, government services and retailers, according to Which?.
What can the fake apps do?
Spy on your screen and activate your microphone and camera.
How do I avoid fake apps?
Only install from official app stores, ideally via the company’s own website, and never from a link in a text.
I installed a fake app. What should I do?
Disconnect, uninstall it, run a security scan, change passwords from another device and call your bank.
Sources
- Which?: The latest scam alerts (fake apps on copycat sites, Aug 19, 2026)
- McAfee Labs: Fake apps on Google Play (Oct 2026)