Stories
Google Tightens Android App Installation Rules to Combat Scams
- •Google is updating Android installation rules to require developer identity verification, a change already active in select regions and expected in India.
- •Installing apps from unverified developers will soon require enabling Developer Options, identity confirmation, a device restart, and a 24-hour waiting period.
- •The new restrictions aim to prevent cybercriminals from pressuring victims into quickly installing malicious APK files sent via messaging apps.
- •Critics argue that the tighter controls undermine Android's open ecosystem by giving Google greater oversight over software installation.
- •Users are advised to avoid unverified APK files, keep Google Play Protect enabled, and download apps only from official stores.
Key Questions Answered
Under the new rules expected to reach India next year, apps on certified Android phones must come from developers who have verified their identity with Google, applying to both Google Play and other third-party app stores like Samsung, Oppo, Vivo, and Xiaomi.
Yes, but it is intentionally restricted to prevent scams. To install an app from an unverified developer, you must enable a new option in Developer Options, confirm your identity, restart your phone, and wait 24 hours before allowing the installation.
Google is implementing these changes to disrupt fraud schemes where scammers pressure victims into quickly installing harmful APK files via WhatsApp disguised as official notices or wedding invitations, which can then drain bank accounts. The 24-hour waiting period is specifically designed to break this psychological pressure.
