Fake Android System Update or Security Patch Pop-up through an app

How it looks through an app, the red flags and what to do.

The app is the scammer's way in: it can read what is on the screen, collect contacts and push you to pay. Fake Android System Update or Security Patch Pop-up is one of the ways this shows up: A pop-up or message says your phone needs an urgent system update and offers a download. The file is a malicious app, not an update.

What fake android system update or security patch pop-up looks like through an app

• An app outside the official store that asks for many permissions.
• A screen-sharing or remote-control app that a caller asks you to install.
• A loan app that asks for contacts and photos.

The scammer uses an alert that copies the look of a system notice, with a progress bar and a warning about a 'critical vulnerability'. It may appear in the browser, in an ad or in a text with a link. The file is downloaded and the phone asks to allow installs from this source. The wording on the prompt is easy to miss, and many people tap 'Allow' to finish what looks like routine maintenance.

Red flags to check on the app

• A web page or message offers a system update as a file to download.
• The file ends in .apk or comes from a link in an unexpected message.
• You are asked to allow installs from this source.
• The 'update' app asks for SMS, accessibility or device admin permissions.
• The app does not come from the official store listing of the company.
• It asks for accessibility, screen overlay, SMS or contacts without a clear reason.

What to do

1. Check for updates only in Settings, under System or Software update.
2. Do not download or install update files from links or chat messages.
3. If you installed one, switch on airplane mode, uninstall it and check device admin and accessibility lists.
4. Change the passwords of your bank and email from a clean device if the app had access.
5. Run a phone scan (Safeavio Sentinel lists risky apps and settings).
6. Call your bank, and call 1930 if money moved.

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. If money moved, call 1930 and report at cybercrime.gov.in at once.
2. Call your bank on the number on your card and ask them to block cards and UPI.
3. Change your UPI PIN and passwords from a safe device after removing the app.
4. Consider a factory reset after backing up your photos.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Phone scan in Safeavio Sentinel reviews installed apps, requested permissions and risky settings like unknown sources, and flags apps outside a store and apps that look like copies of other apps, explaining what looks wrong and how to fix it. Link check tests a download link before you open it. Safeavio does not read your messages by itself and does not install system updates for you.

Full guide: Fake Android System Update or Security Patch Pop-up: how it works, signs and what to do. Other channels: SMS, social media, WhatsApp.

Questions