This dangerous 'CallPhantom' scam spread across 28 Google Play apps
downloaded over 7 million times - here's what we know

Date:
Fri, 08 May 2026 15:20:00 +0000

Description:
Fake Google Play apps were promising access to people's call logs and
required subscriptions.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter ESET uncovered 28 fraudulent apps on Google Play, downloaded 7.3M+ times, falsely claiming to reveal call/SMS/WhatsApp histories The apps generated fake data and charged $6$80 subscriptions, with most victims in India Google removed the apps and
refunded Playbased payments, but thirdparty payment victims must seek reimbursement directly Google has removed more than two dozen Android applications from the Play Store for promising users something it cant
deliver - and charging a solid amount of money for it.

Security researchers ESET found 28 apps on Googles Android repository which claimed to provide the call history for virtually any number. These apps also claimed they could retrieve peoples SMS records and WhatsApp call logs. But the service does not come for free - users were asked to purchase different subscription packages, ranging from weekly to yearly, and costing anywhere between $6 and $80. Latest Videos From You may like 'This rootkit is highly persistent; a standard factory reset will not remove it': "NoVoice" Android malware on Google Play infects 50 apps across 2.3 million devices, here's
what we know Google rejected nearly two million Android apps and blocked more than 80,000 developer accounts from Google Play in 2025 Android Trojans use a devious trick and 'magically' disappear once installed CallPhantom In total, the apps were downloaded more than 7.3 million times, ESET said. The worst part is that they did not, and could not, provide the service they
advertised:

In November 2025, we came across a Reddit post discussing an app named Call History of Any Number, found on Google Play, ESET explained. Unsurprisingly, our analysis showed that the call history data provided by this app is entirely fabricated the app generates random phone numbers and matches them with fixed names, call times, and call durations, which were embedded
directly in the code,.

ESET named the campaign CallPhantom.

Most of the victims are in India. Many of the apps came with Indias +91 country code preselected, and they supported UPI, which is a payment system primarily used in that country. ESET said that the majority (53.7%) of all CallPhantom detections worldwide were found in India. Are you a pro?
Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get
all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Victims were offered three ways to pay for the service. One is via Google Plays official billing system, while the other two relied on third parties. Subscriptions made via Google Play can be cancelled (and were cancelled for all apps that were removed from the repository), and victims can be reimbursed.

For the other two methods, users are advised to contact their payment
provider for options. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/this-dangerous-callphantom-scam-spread- across-28-google-play-apps-downloaded-over-7-million-times-heres-what-we-know


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)