Most of the malicious or phishing apps are the mining apps. My first advise is simple, never download any app that claims you can mine any bitcoin or satoshi or any other coins. Most of them end up accessing some private info about your device. Stay away from them. Also be mindful of some unpopular wallet apps too. You may loose your stored coins.

You should know that every wallet has access to your funds if you don't control the private keys mate.
If you are using an app to store your coins you better to make sure they are not storing your private
Keys on their servers.

Check description, check reviews, check screenshots — don't enter any sensitive information and if it feels shady then it is (in most cases!).

phishing crimes are actually the responsibility of every user, don't expect too much of a system to eradicate them. awareness of the use of a good and correct crypto wallet account is a form of prevention against phishing crime. never download applications that don't make sense, such as applications that offer free crypto coins in a short time, applications that clearly interest the private key or any form of access to your crypto account wallet. except that the application was indeed developed by a related exchanger. but back again, everything is about the user's caution.

Can you be more specific?Don't just say "some crypto apps".Mention some apps that you have doubts about.
That's why Google Play has a review system.If some app is malicious,the users will leave negative reviews and I'm pretty sure that apps with a low review score just won't get many downloads.

Applications were going through crypto-coins portfolios for NEO, Tether and an extension to access Ethereum (ETH), MetaMask. They were designed to violate users' mobile bank credentials and credit card information. After the phishing application is installed and launched, it prompts you for the private password and password of the user's wallet.

False Crypto address wallets created a new wallet generating a public address and private key - which are required to securely send and receive digital currency - but they only displayed the public address of the attacker without user access to the private key. Thinking that the application generated the public address, users deposited their funds in this wallet, but could not withdraw them, because the private key belonged to a cybercriminals.

Unfortunately, Google does not screen or block malicious sites on the browser or apps on playstore. They are roaming all over the internet. It will always boil down to us becoming aware and vigilant of the signs that will point out these sites/apps. It seems that logging on the internet has become quite risky nowadays. So we should be all out careful.

You have to be extremely careful when downloading a wallet, there are a lot of malicious people out there trying to steal funds.  Always triple check what your downloading and you can look up almost anything on this forum under the alternative clients section.  It's advised to use a separate device if you are downloading anything that may be sketchy.

PlayStore is terrible to download this kind of app. The reviews are completely nonsense and irresponsible: you find a mining or faucet app, then you look the reviews and there are lots of 4-5 stars and when you look what they wrote you see things like: "testing, looks good", "wasn't paid yet, but I will give 5 stars for now"...

There is no way to really know if that app is legit or not. And in some cases they start legit and in the end scam the users and worse, steal their informations, with serious chances of invading cellphone's data. I reached to the conclusion it's better to not download any app on cellphones if you really care and want to preserve it for a long time.


Only people who aren't really interested in BTC and Crypto in general will let a negative app experience affect their confidence about it... Just don't download these stuff and you will be fine, use a browser, use popular legit sites and there won't be issues.