Fake Apps Are Hiding in Google Play's Beta Program to Dodge Public Reviews
Scammers are uploading sham casino and gaming apps to Google Play's Early Access program, where there are no public ratings or warnings, and then buying social media ads to pull in victims.
Key points
- Google Play's Early Access program has no public ratings or reviews, giving deceptive apps a place to hide from user scrutiny.
- Researchers at Bitdefender found that fake apps promise cash rewards, free spins, and cryptocurrency payouts that never arrive.
- Some listings have recorded thousands of installs, suggesting the scheme reaches a large number of ordinary users.
- Trademark abuse is also part of the playbook: apps are uploaded under famous game names, indexed by Google Search, then quietly renamed.
- The apps do not contain traditional malware but make money by bombarding users with a relentless stream of advertisements.
Google Play has a feature called Early Access, a program that lets app developers share unfinished apps with willing testers before a full public launch. Think of it as a preview channel for feedback. The catch: there are no public ratings, no user reviews, and no warning system between users. One tester cannot warn another.
Scammers noticed that gap. Fast.
How does the trick work?
The scammers upload a fake app to Early Access, then buy ads on TikTok or Facebook promising big payouts: PayPal cash, gift cards, cryptocurrency, free casino spins. Users click, download, and wait. The payout never comes.
What arrives instead is a wall of advertisements. Security research firm Bitdefender, which published the findings, put it plainly: the ads are the product. Every user who installs the app becomes a small piece of a large machine that generates revenue from showing as many adverts to as many people as possible.
"Many of these ads blatantly use deepfakes" (digitally faked videos) "of famous athletes, actors or other public figures that tell everyone how you're getting 250 spins for free," Bitdefender noted.
What kinds of apps are involved?
Two names keep appearing: Chicken Road, framed as a casual mini-game, and Ice Fishing, presented as a live casino product. Dozens of variants on those names exist across the store.
Trademark abuse adds another layer. A developer uploads an app named something like Grand Theft Auto V (Early Access). Google Search indexes it under that famous name. Then the developer quietly renames the app to something unrelated, but anyone searching for the real game can still land on the fake listing, which now shows AI-generated screenshots that bear no resemblance to actual gameplay.
| App name used | Claimed hook | What it actually does |
|---|---|---|
| Chicken Road variants | Risk-and-reward mini-game | Serves continuous ads |
| Ice Fishing variants | Live dealer casino | Serves continuous ads |
| GTA V (Early Access) | Famous game brand | Renamed after indexing; serves ads |
Should people who downloaded these apps be worried?
These apps do not appear to carry malware, software designed to damage a device or steal data. The risk is subtler: wasted time, drained battery, and personal data handed to ad networks whose practices are unclear. No payment ever arrives.
If you downloaded an app after seeing a social media ad promising cash or free spins, delete it. Check your bank or payment accounts for any charges you did not authorise. Be sceptical of any ad that promises easy money in exchange for installing an app, on any platform.
Social media platforms do remove these misleading ads, but the process is slow enough that many users are caught before a bad ad disappears. The scammers simply repeat the cycle with a new listing.
Bitdefender's research suggests some developers appear multiple times across the store, pointing to an organised and repeatable operation rather than isolated bad actors.
