It can be totally avoided

[lovesmayfamilis]

First time I hear that Playstore also allow scammers to launch app in their store. I was thinking that all apps in the Playstore are first checked by play protect team and then only save apps are allowed because we say above every app that it is protected by play protects.

I generally check number of download, rating and review before downloading any app. Official app are download more than 100k many times and review more than 10k however downloading from official site is more secured. We have to get paly store, Apple store downloading link from the official site so that we didn't face any scam attempt.

You will be surprised by Kaspersky Lab's investigation that hundreds of Google Play apps have been infected and used by users more than 600 million times.
Therefore, trusting even very famous developers at some point can be dangerous. Exactly like using a phone for various needs, including finance and games, can end badly.

https://www.kaspersky.com/blog/malware-in-google-play-2023/49579/

[Faisal2202]

Now I'm really scared because most of my crypto apps were downloaded from Google play store. All my wallets including Electrum and Bluewallet and even some exchanges applications were downloaded there. Recently,  I downloaded Uniswap wallet there as well. If scammers can infitrate Google Playstore, the damage will be huge.

What then is your suggestion on safe way to download apps?

You don't have to be afraid just be careful when downloading some exchange, or wallet from the Play Store or any app store. Because the fake listing is possible and we can't blame those store owners because these developers found a way to bypass some basic rules and found a way to come around them and become able to list their fake wallet or exchange app on these app stores.

All you have to do is find the official website and find a way to download those wallet apps from there or try to see the signatures of these apps if they are open source like Electrum wallet. I don't know if TW provides signatures to confirm it but Electrum does.

Besides confirming the signatures, you better check the number of downloads, and reviews, and don't forget to download apps using the official website. Because it reduces the risk, I always use websites official ones, to download these wallets or register on new exchanges. Once again, you don't have to be scared just be careful while using new apps and technologies and if you are afraid of that much then don't keep your funds in wallets that are vulnerable to attacks easily, you might want to enable 2FA like multi-signature wallets.

[youdacapt]

Be careful with third-party app developers, majority of them are criminals, the most common crypto thefts happened through google playstore and even Microsoft app store...
 

I agree with this statement; and it is happening on all playstores even the huawei store. This is why as crypto investors we need to be extra vigilant and careful especially in conducting researches. Recently, the application stores are focused on "earning" and securing revenues instead of protecting users on their platform.
 
How do you vet?

Once you find an app on the store; don't just download, first visit the project group channel and verify the existent of the mobile app. In google playstore; there is a popular decentralized launchpad app there which is fake; fake apps are obvious, always obvious.

Secondly, you should read developer comments or "App Privacy"  on the apps page before downloading to your phone.

Always keep yourself and assets safe!

[oktana]

What then is your suggestion on safe way to download apps?

From the original/official website, that is how to download your wallet and your other crypto stuffs. There are quite a lot of scam applications in Google playstore and Apple store, thus you cannot be sure if you are downloading the actual wallet or a phishing application.

But do not forget that it isn’t always going to be a crypto wallet app. These phishing applications could be almost anything. I read a thread yesterday where a forum member posted that he lost 11 BTC and later figured his wife was trying to download a normal app on the laptop. So, while you’re careful to not download the fake wallet, because what app you download in the first place. Also, you can’t fully blame these app stores? Everyday a lot of applications are created. It’s not easy to go through all the features of the app, let alone check for malicious code. Advancements will come with time though but wrongdoings always finds its way.

[Gladitorcomeback]

First time I hear that Playstore also allow scammers to launch app in their store. I was thinking that all apps in the Playstore are first checked by play protect team and then only save apps are allowed because we say above every app that it is protected by play protects.

I generally check number of download, rating and review before downloading any app. Official app are download more than 100k many times and review more than 10k however downloading from official site is more secured. We have to get paly store, Apple store downloading link from the official site so that we didn't face any scam attempt.

You will be surprised by Kaspersky Lab's investigation that hundreds of Google Play apps have been infected and used by users more than 600 million times.
Therefore, trusting even very famous developers at some point can be dangerous. Exactly like using a phone for various needs, including finance and games, can end badly.

https://www.kaspersky.com/blog/malware-in-google-play-2023/49579/

Thanks lovesmayfamilis, honestly I was not aware of it and I was thinking that only PC software will install malware. Anyway I read full article and it has very worthy Information and I suggest you to write complete thread whenever you get free time which will help newbie so much.

According to article most of the Playstore app showing hidden ads which affect performance of the phone. Some apps open sites in browser and auto subcribe services by auto filling phone code. very few apps that are stealing phone information but I didn't see wallet or phrase Target there but I think whenever we copy our phrase the possibility of stealing is possible when these malware installed