According to a new report (opens in new tab) from Lookout, the cybersecurity firm’s researchers have discovered close to 300 predatory loan apps on the Google Play Store and the Apple App Store. While these apps claim to offer fast, digital loan approvals with reasonable terms, they actually exploit vulnerable borrowers and trick them into signing predatory loan contracts instead. In total, Lookout found 251 predatory loan apps for Android on the Play Store which have been downloaded over 15 million times as well as 35 such apps on the App Store that managed to make it into the top 100 finance apps in their regional stores. Thankfully, Lookout has been in touch with both Google and Apple and all of the apps in question are no longer available to download.
Delete these apps now
Below you’ll find some of the predatory loan apps targeting Android users as well as the full list of iOS apps. If you have them installed on your devices or know someone that does, they should be deleted immediately – granted you didn’t sign up for a loan. Android apps
ActiCreditoAdaCashAdaKreditAddMoneyBaseWalletBazzaBear LoanCash StarCash WorldCashBusCashCashNowCashFamilyEasy LoanEasy NoteEasyLoanEasyLoanFair CreditFairKashFairLendFast CoinLibreCashLionCashLiveCashMoney ClubMoney LoanMoney PocketMoneyCashMore CashWeShareWiseLoanYes Cash
iOS apps
CashGCredilunaCreDinero - Préstamo personalCredylanaDana Harapan - Pinjaman OnlineDuit Langit- Pinjaman OnlineEasyPeso-Préstamos en efectivoFácil PréstamoFacilCash-Préstamo seguroFlying CashHappyPera 2 - Easy Cash LoanKantung OnlineKapten Pinjam-Layanan KeuanganLimaSaku - pinjaman dana tunaiLoan Point-Easy loanLoanme - easy & instant loanLoanZone-online loanMineQOne Cash-online loanPahlawanPinjaman-pinjaman uangPCashPeraUp - Mobile Cash LoanPinjamanTeman-pinjaman pribadiPinjamUang - Pinjaman OnlinePundiPaL-Pinjaman mikroRapiCASH - Préstamos sencillosRapiloanRupeeMeRupRupTrycashTunai Cepat- Pinjaman OnlineUang Cepat - Pinjaman OnlineUang Ligat - Pinjaman MikroWadah Lapak - Selamat MeminjamWecash
Unnecessary permissions
As is the case with a traditional loan, users that downloaded these loan apps were required to provide personal and financial information before they could get approved. However, the apps also required users to grant a number of device permissions as part of the process. These device permissions include being able to access a user’s call logs, SMS messages, installed apps, photos and their contacts. If a user failed to grant access to any of these permissions, the loan apps wouldn’t allow them to proceed. Based on Lookout’s analysis of these loan apps, many of them would begin collecting contact information as soon as the necessary permissions were given and some of the Android apps would also exfiltrate SMS data. While malicious apps might collect this data and then sell it on the dark web or use it to commit fraud, the operators of these predatory loan apps used contact information from victims in order to harass them and their families about repaying the loans. Sometimes, this would even occur before the repayment deadline had passed. Turning to a mobile loan app for quick cash can be embarrassing on its own but when your friends, family and even your colleagues find out about it through messages designed to harass you, it makes the situation even worse. Also, with access to your photos, the operators of these predatory loan apps could even use them to commit blackmail.
Huge penalties and a shorter repayment period
Even though these loan apps appeared to offer reasonable terms at first, things quickly changed once they received a small portion of the loan amount they applied for. In a separate report from The New York Times (opens in new tab), borrowers saw large fees – which were as high as one third of the total amount of the loan – subtracted from the amount of money they would receive. Likewise, other victims saw extremely high interest rates kick in and they were asked to repay their loan within a matter of days. The problem here is that both Google (opens in new tab) and Apple (opens in new tab) have very specific guidelines for personal loan apps on their respective app stores. Both tech giants allow for a maximum annual percentage rate (APR) of 36 percent and the minimum amount of time to repay a loan must be greater than 60 days. The loan apps that Lookout investigated were in compliance with the Play Store and App Store’s policies but the terms that were paid out to borrowers were completely different than those described in the listing pages of these apps. For instance, in one review for the iOS app Trycash, a user reported that the app said they would have 180 days to repay their loan when in reality, only eight days were provided. According to Lookout’s analysis, there are likely dozens of independent operators involved in this campaign as its security researchers only found that some of the apps in question shared the same code base.
How to stay safe from loan scams
In order to protect yourself from this loan scam and others like it, you should only apply for loans from established institutions like well-known banks and other lenders. Before taking out any loan, you need to carefully research the organization you’re borrowing from and find out about its history, reputation and whether or not it’s registered with national regulatory agencies. If you do decide to use a mobile loan app, you should carefully scrutinize any permissions requested by the app after you’ve installed it. Does this particular app really need to access your contacts, text messages, location, files or photos? You also want to avoid installing apps from unknown sources as they can contain malware or other viruses. Sure, malicious apps do end up on official app stores from time to time but Google and Apple both have security checks in place to prevent this from happening. If you have an Android phone, you want to ensure that Google Play Protect is enabled as it can scan new apps as well as those you’ve already installed for malware. For even more protection though, you may also want to install one of the best Android antivirus apps. Even though getting a loan through your smartphone is certainly faster, when in doubt, you’re better off heading to the bank or calling a financial institution over the phone to schedule an appointment.
