Home › Safe use & account

Fake apps and phishing pages: how to spot them

Two threats account for most of the harm done to players: modified apps and phishing pages. They are different in form and identical in purpose, which is to get your credentials or your payment details by impersonating something you trust. Recognising them is not difficult once you know what you are looking at. This article describes how each works and how to spot one before it costs you anything.

It helps to remember that both threats are addressed by a single question: did I go looking for this, or did it come looking for me? Things you sought out and verified carry far less risk than things that arrived uninvited, and the difference is one you can always establish. When the answer is the second one, the default should be suspicion until something proves otherwise.

It is also worth rehearsing what you would do if something did go wrong, because a plan made calmly is worth more than a decision made in alarm. Change the password, review the sessions and transactions, remove unfamiliar software, tell the operator and your provider. Knowing the order in advance shortens the most valuable minutes of the whole incident.

What a modified app is

A modified application is a copy of the real app that has been altered before it reached you. The changes may be small and hidden: a login form that sends your details elsewhere, a payment step that redirects, or a quiet background process. Because the app looks normal, the danger is invisible until it is too late.

The defence is entirely about the source. An app installed from the operator's official page is the official app; an app from anywhere else is a copy with an unknown history. There is no setting on the device that can tell you which you have.

What a phishing page is

A phishing page is a copy of a website, created to collect what you type. It might be reached from a link in an email or message, from an advertisement, or from a search result. The copy can be excellent, and the giveaway is in the details rather than the design: the address, the certificate, the route by which you arrived.

Phishing depends on urgency and on convenience. The message that says your account is at risk and offers a handy link is doing both at once, because a hurried person reads the content and skips the address.

The shared tells

Both threats share a set of signs. Something arrived uninvited, the route was unusual, the address is subtly wrong, pressure is applied, and the request is for exactly the information worth stealing. Any one sign deserves a pause; two together are enough to stop.

The unifying question is: who initiated this? If you went looking for something, the risk is lower. If something came looking for you, treat it as a warning until proven otherwise.

Spotting them in practice

• Install apps only from the operator's official page.
• Never install a file offered by a message, forum or advertisement.
• Check the address on any page asking for a login or payment.
• Ignore urgency and verify through a route you trust.
• Treat every unsolicited offer as suspicious by default.

What attackers are after

Both a modified app and a phishing page want the same things: the login that opens your account and the details that move your money. That is why the requests are so predictable. Any page or app asking for credentials or payment data is asking for the exact items worth protecting, and that should raise the level of scrutiny rather than lower it.

Recognising the target makes the trap easier to see. The request tells you what the page is for, whatever it claims to be.

If you think you have been caught

Act quickly and in the right order. Change your account password, review your transactions, remove any application you installed from an unknown source and inform both the operator and, where relevant, your payment provider. Speed limits the damage, and the steps are the same whether the exposure was an app or a page.

It is worth doing this calmly rather than in panic. Most incidents are containable when they are addressed promptly, and the worst outcomes come from delay rather than from the incident itself.

Spotting fake apps and pages

Fake apps and phishing pages are the same trick in two forms, and they fail against the same defence: an official source, a checked address and a refusal to be rushed. Install only from the operator's page, follow no uninvited link, and treat any request for credentials as a moment to stop. Because the official channels and the appearance of legitimate pages are controlled by the operator and can change, verify from a source you trust before you rely on anything, and remember that these products are for adults only (18+).

Read next