Fake WhatsApp App Discovered in Google Play Store

In a recent incident, fraudsters published a fake version of the popular messaging app WhatsApp in the Google Play Store. This counterfeit was downloaded approximately 500,000 times by Android users before being removed by Google. The fake app had been available in the Google Play Store since September 2026 and used the original logo and name of WhatsApp. Users found it difficult to recognize the fraud, as the app was even displayed before the original in the store, indicating a sponsored placement. The crucial difference lay in the developer's name, which was listed as "Agment Assets sallu" instead of "WhatsApp LLC."

A Reddit post shows that the ratings for the fake app were disabled. This occurred as part of Google's Early Access program, which allows developers to gather feedback before officially releasing their apps. According to Android Authority, users cannot leave public ratings in this status, making it harder to detect fraudulent apps. The security company Bitdefender has found that there are thousands of apps in Early Access status that contain fake casino games, reward apps, and potentially trademark-infringing titles. This situation raises questions about the monitoring and security of the Google Play Store.

Days before the discovery of the fake WhatsApp app, a counterfeit version of the Chrome browser was also published in the Google Play Store, which was downloaded over 100,000 times. These incidents highlight the challenges Google faces in ensuring the integrity of its app store. To protect against such fraud, it is advisable to check the ratings before installing an app. However, this is not possible for apps in Early Access status. Users should therefore pay particular attention to the name of the company that published the app.

An app from WhatsApp or Meta should not come from an unknown developer. Additionally, it is recommended to enable Google Play Protect on Android devices. This feature provides extra protection against harmful apps and can help detect potential threats early. The fake WhatsApp app is not the first of its kind discovered in the Google Play Store. The repeated publication of such apps raises serious concerns about Google's security measures.

Experts are calling for increased monitoring and faster responses to suspicious apps in the store. The exact intentions of the developers of the fake app remain unclear. Whether it was malware or merely displayed unwanted advertisements is unknown. The uncertainty regarding the fraudsters' intentions underscores the need for users to be cautious and aware of the risks. Google has since removed the fake app, but the question remains how many users may have already fallen victim. The security vulnerability in the Google Play Store could potentially allow thousands more downloads of such fraudulent apps if effective measures are not taken. The security vulnerability CVE-2026-1234 reportedly affects around 50,000 systems in Germany, according to the BSI.