Fake installers are the biggest real-world risk with any side-loaded app. A copy can look identical to the real thing while quietly reading your SMS codes. This checklist takes five minutes and covers the checks that matter.
Before you download
- Type the address yourself or use a bookmark you saved earlier
- Be suspicious of links sent by strangers on WhatsApp, Telegram or social media
- Check the spelling of the domain carefully — one changed letter is a common trick
- Ignore pages that promise "modded", "hacked" or "auto-win" versions
During install
- Keep Google Play Protect switched on
- Read every permission request before accepting
- Refuse SMS, contacts, call logs and accessibility access
- Allow "install unknown apps" for one browser only, then switch it off
The full permissions table on our install guide shows which requests are normal and which are red flags.
Signs you installed a bad copy
- The app asks for your banking password or a TAC/OTP
- Your phone shows pop-ups or new apps you didn't install
- Battery or data use jumps suddenly
- You receive bank OTP messages you didn't request
What to do next
- Uninstall the app immediately.
- Disconnect from the internet and run a Play Protect scan.
- Change your banking and email passwords from a different, clean device.
- Call your bank's fraud line, and in Malaysia report fraud to the National Scam Response Centre on 997.
18+ · Play responsibly
This article is information, not advice or encouragement to gamble. Games are random and favour the house; only ever stake what you can afford to lose. Help in Malaysia: Talian Kasih 15999, Befrienders KL 03-7627 2929.