You need to uninstall these 15 ‘SpyLoan’ apps from your Android phone today

Predatory lending apps can cause a lot of trouble for unsuspecting users, and malicious actors continue to release new versions of malware despite efforts by platforms like Google to crack down on these nefarious apps. A security firm has now detected 15 apps infected with ‘SpyLoan’, a potentially unwanted program (PUP) that has continued to grow since 2020. Google has suspended some of the affected apps, but users who have already downloaded them to their mobile phones will have to perform a manual removal.

Found fifteen SpyLoan apps installed on Android phones

McAfee’s mobile research team identified 15 SpyLoan Apps on Play Store – These are a form of nefarious predatory loan apps that affect Android smartphones. According to the security company, these apps are installed on more than 8 million Android devices. Some of these apps were suspended or updated after the report was published.

Some of the SpyLoan apps detected on the Play Store
Photo credit: McAfee

These SpyLoan apps typically request various permissions once installed on a user’s smartphone and start collecting huge amounts of personal information. This data is encrypted before being exfiltrated to a command-and-control server. These apps also share a common framework and code, and present a similar user flow – including asking for a one-time password (OTP) – according to the company.

Despite using logos and names that mimic reputable apps, these SpyLoan apps have reportedly managed to bypass Google’s checks before allowing apps into the Play Store. They also lure users with the promise of quick and easy loans, while using a countdown timer to get them to sign up.

Several one-star reviews of some of these apps on the Play Store include complaints from users who have received threatening phone calls and messages from recovery agents. Some of these users also claim that they were threatened with altered images stolen from their devices.

Users are asked to act quickly using fake countdowns
Photo credit: McAfee

According to McAfee, India tops the list of countries with the highest prevalence of fake lending apps in the third quarter of 2024. The other countries are, in order, Mexico, the Philippines, Indonesia, Thailand, Kenya, Colombia, Vietnam, Chile and Nigeria.

It is worth noting that the RBI and the Ministry of Finance have taken action against several apps in India in recent years. However, McAfee’s mobile research team states that the number of these apps continues to increase, despite efforts by government agencies.

Users can check on their smartphones if any of the apps below are available. If these apps are still installed, they will need to be manually removed from the handset to cut off access to their personal data. Users should also limit themselves to installing well-known apps on their devices to minimize the risk of these applications.