{"id":454,"date":"2018-05-11T07:00:58","date_gmt":"2018-05-11T07:00:58","guid":{"rendered":"https:\/\/eset-blog.aist.fun\/how-to-protect-yourself-as-the-threat-of-scam-apps-grows\/"},"modified":"2019-05-29T12:47:55","modified_gmt":"2019-05-29T12:47:55","slug":"how-to-protect-yourself-as-the-threat-of-scam-apps-grows","status":"publish","type":"post","link":"https:\/\/blog.eset.ee\/et\/en\/2018\/05\/11\/how-to-protect-yourself-as-the-threat-of-scam-apps-grows\/","title":{"rendered":"How to protect yourself as the threat of scam apps grows"},"content":{"rendered":"\n

As the threat of bogus apps continues, what can we do to protect ourselves against these fraudulent practices?<\/p>\n\n\n\n

What can we do to protect ourselves against these fraudulent practices?<\/p>\n\n\n\n

Be aware of the limitations of app store review processes<\/h3>\n\n\n\n

The policies and review procedures of major app stores do keep out a large number of fraudulent apps. While there are always more things they might and probably should be doing<\/a> to continue to address this problem, it is an ongoing learning process for all of us.<\/p>\n\n\n\n

There\u2019s nothing new about advertisers<\/a> and app developers<\/a> using deceptive practices, but the Touch ID scam<\/a> that Luk\u00e1\u0161 \u0160tefanko<\/a> wrote about recently is a significant twist in this ongoing story. Of course, iOS users are not alone in facing these dilemmas; as Luk\u00e1\u0161 wrote earlier this year<\/a>, Android users are experiencing their own flood of predatory app tactics too.<\/p>\n\n\n\n

Due to the incredibly large total number of apps and updates that each major app store sees every day, much of the work involved in the review of new submissions is automated. This means that each app likely has functionality that will not necessarily be seen by a human or be tested specifically. Even very well-known and more-or-less legitimate app vendors have been caught<\/a> doing things to try to evade having certain functionality reviewed. This means it\u2019s still crucial to do our own due diligence.<\/p>\n\n\n\n

Read reviews<\/h3>\n\n\n\n

While most scam apps do in fact include numerous positive reviews, these often show signs of phoniness. Wording may be very vague, downright nonsensical, or exhibit repetitive patterns (including different reviews repeating the same phrases or having similar usernames, for example). It\u2019s a good idea to re-order the ranking options on reviews to see a more balanced picture: depending on the particular app store, you can sort the reviews to see those that have been deemed \u201cmost helpful\u201d or that are ranked \u201cmost critical\u201d first.<\/p>\n\n\n\n

Be patient<\/h3>\n\n\n\n

The best time to figure out whether an app is a scam is before<\/em> you download it. While it may be hard to calm the fear of missing out, it\u2019s best to wait a few days or weeks before downloading brand new apps, to let other people be the \u201cguinea pigs\u201d. This way you can read what other people have to say about the app\u2019s functionality before making a decision.<\/p>\n\n\n\n

Use apps by developers you know and trust<\/h3>\n\n\n\n

If at all possible, it\u2019s a good idea to stick with reputable app developers. If you\u2019re new to a platform, that may be easier said than done. In that case, it\u2019s a good idea to do a little more research first, to get a better sense of whether a particular developer already has other well-reviewed and popular apps that are currently available for download.<\/p>\n\n\n\n

Be aware of valid functionality<\/h3>\n\n\n\n

While it can be hard to keep up with the complete picture of what each new device can do, it\u2019s a good idea to be at least somewhat aware of the functionality of your device. For example: fingerprint data<\/em> are not accessible to apps, only a \u201cyes\u201d or \u201cno\u201d verdict about whether your fingerprint matches the one previous stored on your device. This is to say that apps cannot use a scan of your finger to give advice on calorie data, nutrition information, how much water you should drink, or to present ancestry analysis. (It\u2019s worth noting that you couldn\u2019t really get valid information on any of those things from a scan of your finger even if the app could access those data.)<\/p>\n\n\n\n

If your phone has existing functionality like a QR reader or a flashlight app, it might not be a good idea to install an app that does that exact same thing, especially as many of these apps have a history of being problematic. If you\u2019re looking to specifically try a different app than one your phone already has \u2013 like a mail reader or an internet browser \u2013 be sure to read some third party reviews first, to see which options are well-reviewed and popular.<\/p>\n\n\n\n

Dig deeper<\/h3>\n\n\n\n

There are a variety of things you can look at to find information that might indicate a predatory app. Do the developers have other apps available already, and are they reviewed well? Do they have a website that appears professional, including contact information? What results are returned if you do an internet search for the name of the app or developer plus the word \u201cscam\u201d? Can you find more information on third-party sources regarding subscription rates or in-app purchase prices? (Apple may offer information about the latter within the app description.) Does the app purport to give you a free or discount version of more expensive for-fee app? (These scams often cost more than<\/em> just money!)<\/p>\n\n\n\n

Request a refund and report bad actors<\/h3>\n\n\n\n

If you\u2019ve gotten as far as having already downloaded an app that turned out to be a scam, ask the app store or the bank attached to your payment card to refund the charge. If the purchase was in the form of a subscription, this may be more complicated, but it will soon become worth your time and effort to have gone through the entire process. You can also report fraudulent apps to the app stores themselves, as well as contributing reviews that describe your experience.<\/p>\n\n\n\n

It\u2019s time to push back against \u201cdark patterns\u201d<\/strong><\/h3>\n\n\n\n

Many of us already vote with our wallets when it comes to sub-optimal software behavior, by choosing not to purchase or support companies that fail to consider privacy or security, or that behave in ways that we consider too predatory or problematic. But there is another area that more people should be aware of, that describes a more understated category of sketchy behavior.<\/p>\n\n\n\n

\u201cDark patterns<\/a>\u201d describe the scenario where a user interface is designed to intentionally trick or emotionally manipulate you into clicking where otherwise you might not. In the case of the Fitness Balance<\/a> app, it takes advantage of the fact that the Home button on some iPhones or iPads can serve two purposes: your finger is already resting on a (fingerprint) sensor in a way that can also be used to select an option on the screen. Newer versions of the iPhone require you to make two distinct actions for these things; you must take your finger off the sensor for a moment after a fingerprint scan, before it can be used to select an option.<\/p>\n\n\n\n

Some dark patterns are much less obvious, because they take advantage of expectations that we may not be consciously aware that we have, or because they cause us to be more inattentive.<\/p>\n\n\n\n

Here are a few examples of scenarios in user interfaces that predatory app makers may try to manipulate:<\/p>\n\n\n\n