This kind of thing happens too often. I think people should stop downloading apps from play store and download them directly from the official website instead. Even some users that I know hold millions of dollars are still falling for this trick because he's too lazy to confirm the app and visit the website.
Yes, that's the only way to avoid this kind of scam apps but sometimes it requires the users to download too such an app. So do you think there's an app or system to determine whether the app is legit or not? If there is it could be a big help to everyone.