Fake Call History Apps on Google Play Steal Payments, Hit 7.3M+ Downloads

ESET uncovered 28 fraudulent Google Play apps (CallPhantom) that promised call, SMS and WhatsApp histories for any number but generated fake logs and hid them behind paid subscriptions; the apps — installed over 7.3 million times and primarily targeting India/APAC — used hardcoded templates and random data, abused notifications and varied payment methods (Play billing, UPI redirects, in‑app card forms) to collect money and complicate refunds; ESET reported the apps and Google removed them.