Fake stalking apps racked up millions of downloads. It says a lot about Google’s security and us

ESET found 28 fake Android apps, dubbed CallPhantom, on Google Play that promised impossible access to call logs, texts, and WhatsApp history.

The apps reportedly drew about 7.3 million downloads and used fake reviews and curiosity-driven marketing to lure users.

After users paid, the apps generated fabricated data instead of real spying features, and they were later removed following an external report.

The case highlights how scams can exploit gaps in app-store security, payment controls, and refund protection.