01
Before downloading
Confirm the final domain and why the file is being offered. Avoid an installer sent through an unsolicited message, especially when the sender creates urgency or requests account credentials.
- Check the full URL and redirects.
- Record the source and date.
- Avoid archives containing unexpected installers.
02
During installation
Review Android warnings and permissions. Google recommends keeping Play Protect enabled and paying attention to harmful-app alerts; do not disable protection merely to bypass a warning.
- Compare package identity.
- Review powerful permission requests.
- Treat a clean scan as one signal, not a guarantee.
03
After installation
Open the app before entering sensitive data and check its destinations. If the device or Google account shows suspicious activity, use a known Google account-security page from a trusted device.
- Review installed permissions again.
- Watch for unexpected browser redirects.
- Never send a password or verification code.