500,000 Downloads of the Fake App

A counterfeit WhatsApp application circulating on the Google Play Store was downloaded more than 500,000 times before finally disappearing from the app store on Monday (19/10/2026). The finding was first revealed by Reddit user 2ne1cheese and reported by tech outlet Android Authority.

The fake application was published by a developer named 'Agment Assets sallu'—an account that had no other apps on the Play Store. Its store listing was crafted to look convincing: the icon, screenshots, and description text mirrored the official WhatsApp identically. The fraudulent listing even appeared as a sponsored search result, placed directly above the legitimate WhatsApp app.

Play Store Early Access Loophole

The counterfeit app's modus operandi exploited a loophole in Google Play's Early Access feature. Applications enrolled in the program do not show public reviews, making it difficult for users to distinguish authentic apps from fakes. This loophole contributed to deceiving 500,000 users.

By comparison, the official WhatsApp has surpassed 10 billion downloads on the Play Store, holding an Editors' Choice badge alongside hundreds of millions of reviews. As of Monday morning, the fake listing was no longer found, though Google has not issued an official confirmation regarding its removal.

This incident is not unprecedented. Previously, a fraudulent Google Chrome app also slipped through and garnered more than 100,000 downloads before being taken down. The same pattern recurred: cloning the name and icon of a popular app, then promoting it via sponsored search slots to appear legitimate to everyday users.

How to Identify the Authentic App

WhatsApp (Meta) emphasized that it does not support unauthorized applications. 'We do not support these third-party apps because we can't validate their security practices,' the company stated on its support page. While there is currently no verified evidence of data theft by the application, cybersecurity experts warn that such clones pose serious risks of stealing personal data or injecting malware.

Users are urged to always verify the developer's name prior to downloading—official WhatsApp is published by Meta—as well as look for the Editors' Choice badge and total download count. Do not rely solely on top-ranking search results, including those labeled as sponsored ads.

To verify whether the app installed on your phone is authentic, visit the official WhatsApp page on Google Play Store and check whether it shows as already installed. If the official page does not recognize the installation on your device, uninstall the application immediately and reinstall it from the official page.