What to do if you installed a suspicious app
A malicious app may capture what you type or control your device. Removing it and securing accounts is the priority.
Quick answer
A malicious app may capture what you type or control your device. Removing it and securing accounts is the priority.
- Uninstall the app immediately
- Disconnect from the internet if behaviour seems odd
- Change key passwords from a different, trusted device
- Run a security scan
Do this now
Contact your bank if banking apps were on the device.
Understanding what happened
Installing an app the scammer pointed you to - often described as 'support', 'security', or a 'banking helper' - can hand over far more than you intended. Depending on the permissions you granted, it may read your screen, capture what you type, intercept codes, or let someone control the device remotely.
The danger is that everything you do on the device, including opening your real banking app, can be watched or recorded while the app is installed. Some of these apps disguise their icon or name, so they're easy to overlook later.
Removing the app, disconnecting from the internet, and changing important passwords from a different, trusted device usually breaks the attacker's access. The steps below take you through that safely, in an order that limits what they can do while you clean up.
First 5 minutes
- Uninstall the app immediately
- Disconnect from the internet if behaviour seems odd
- Change key passwords from a different, trusted device
- Run a security scan
First 24 hours
- Review app permissions on your device
- Update your operating system
- Check bank and email for unusual activity
- Consider a factory reset if problems persist
What not to do
- Do not pay anyone who promises to recover your money for an upfront fee
- Do not act on follow-up messages claiming to be the fraud team
- Do not delete evidence before saving it
Evidence to save
- Screenshots of the message and sender details
- Phone numbers, usernames, links, and account or wallet addresses
- Transaction references, receipts, and amounts
How to report
Report through official channels for your area.
Find official reporting links for your country in the reporting directory.
- Do not use phone numbers or links from the suspicious message - look up the official ones yourself.
- Report quickly if money was sent or ID documents were shared; speed improves your options.
- Keep your evidence - see how to save scam evidence.
Beware of recovery scams: no legitimate service guarantees getting your money back for an upfront fee.
This is general safety information, not legal, financial, or cybersecurity incident-response advice.
Frequently asked questions
How quickly should I act?
As soon as possible. Fast action - especially contacting your bank - gives the best chance of limiting harm or stopping a payment.
Will I get my money back?
Sometimes, if you act quickly, but there is no guarantee. Be very cautious of anyone who promises guaranteed recovery for an upfront fee - that is a recovery scam.