Fleeceware apps bilking iOS and Android users out of millions

Researchers have found more than 200 "fleeceware" apps in the Apple and Google Play app stores that bring in millions of dollars in fraudulent revenue for their developers.

E'er downloaded an app that promises a free subscription but then ends up saddling you with hefty charges? Co-ordinate to researchers at Avast who posted their results yesterday (March 24), this isn't simply a desultory occurrence affecting a few users.

The all-time camera phones right now
The best Android antivirus apps to go on your phone clean
PLUS: Slack merely backtracked on the worst idea ever

Rather, fleeceware is a scourge tearing through the app stores for the all-time Android phones and the all-time iPhones. Avast researchers listed 204 fleeceware apps totaling in backlog of a billion downloads — yes, that's a billion — and generating estimated revenue of more than $400 million.

"Fleeceware" refers to software that promises something for free, simply and so delivers subconscious costly charges. Other types of nefarious apps such as adware or spyware infiltrate devices to generate advertising-fraud revenue or pinch users' data, but fleeceware is cunning in that it tempts users to download software before charging astronomical subscription fees.

Information technology's too more or less legal, although conspicuously unethical. Subscriptions to many of these app amount to hundreds of dollars per year, and Avast said the top annual fees tin exist more than $3,000.

There are various mechanics through which fleeceware tries to hook subscribers, not to the lowest degree through the lure of free trials, merely most of these apps over-hope and under-deliver on their services.

These seemingly benign offers and then lock users into a "recurring high subscription fee, generating substantial acquirement for the developers," according to the Avast report. "In that location'due south also the possibility that users forget to cancel the gratis trial, resulting in more expensive fees."

The water is further dirty by fake reviews that falsely eternalize the legitimacy of the crooks' apps.

"This tactic impairs a user's ability to brand an informed decision near the awarding at mitt," said Avast.

Children, too, are affected, frequently downloading what appears to be an innocuous app with parents discovering the extortionate fees "weeks or months later" on their banking concern statements.

Furthermore, said Avast, "it appears that office of the fleeceware strategy is to target younger audiences through playful themes and catchy advertisements on pop social networks with promises of 'free installation' or 'costless to download'."

"By the time parents observe the weekly payments," the report added, "the fleeceware may have already extracted significant amounts of money."

A very lucrative concern

Avast has posted lists of the fleeceware apps it institute: 134 fleeceware apps in the Apple App Store and lxx fleeceware apps in the Google Play Store.

Many of the apps offer horoscope or palm readers, elementary photo filters or music-making effects or lessons and PDF certificate scanners/QR code readers. Avast researchers found that the apps often pledged a three-twenty-four hours free trial earlier the subscription started.

Avast used estimates from app-industry analysts Sensor Belfry to gauge the profitability of the apps. The Android apps take more than than 500 meg downloads, Sensor Tower estimated, and accept earned about $38.5 million.

The iOS apps were even more lucrative. Although they also had been downloaded almost 500 1000000 times, their estimated revenue was most 10 times as much; Sensor Tower figured information technology at $365 million.

Sensor Tower told Avast that these apps "are actively advertisement on major social networks such as Facebook, Instagram, Snapchat and TikTok."

We checked a few apps from both of Avast'south lists, and all were still bachelor for download at the fourth dimension of this writing. Avast said it had notified Apple and Google of the apps and asked the companies to review them for violations of the app stores' terms of service.

If you've been bilked by a fleeceware app, your options for getting any money back are limited. Google and Apple are non responsible for reimbursing you after a set amount of time has passed.

Despite the fact that legitimate companies often refund exorbitant charges out of goodwill — such as when children run up huge credit card bills by buying in-game items — in that location's no obligation for companies to practise so, and people may accept to resort to getting their banks involved to process chargebacks.

Fleeceware is a very catchy affair. It'due south quite obviously very unethical, just one that seems to occupy a legal grey expanse. Information technology's besides worth being mindful of the resilience of these apps, considering many of them keep charging users' credit cards even after the apps accept been deleted from users' phones.

You can head over to the Apple and Google support pages to find out more on how to all-time manage your subscriptions. In the meantime, go along an eye out for anything untoward in the mobile app wild west!

MORE: Best gratis Android apps