Fake apps. How to spot one in ten seconds.
Both app stores review submissions, and both let through a steady stream of copycats — apps built to look like a game your child wants, designed to harvest data, serve aggressive ads, or push a subscription.
What fake apps are actually doing
- Ad fraud. Bombarding the user with ads, sometimes running invisible ones in the background and draining battery and data.
- Subscription traps. A three-day trial that converts to an expensive weekly charge, with cancellation deliberately obscured.
- Data harvesting. Contacts, photos, location, device identifiers — sold on.
- Credential phishing. A fake Roblox or Minecraft login screen that captures the real account.
- Adware and worse on sideloaded Android apps from outside the Play Store.
The ten-second check
Teach your child this. It's short enough that they'll actually use it.
1. The developer name
This is the single most reliable signal. Real Minecraft is by Mojang. Real Roblox is by Roblox Corporation. If the developer is "Studio Games Inc" or a string of words that don't mean anything, it's fake. Tapping the developer name shows everything else they've published — a wall of similar clones is conclusive.
2. The download count
A genuinely popular game has millions of downloads. A copycat has thousands. If your child expects a household-name game and the count is low, it's not the real one.
3. The reviews, read properly
- Many five-star reviews with generic wording posted in a short window is a bought-review pattern.
- Read the one-star reviews first — that's where "this isn't the real game" and "it charged me" appear.
- Reviews that mention a different app entirely mean the listing was repurposed.
4. The screenshots
Look for mismatched fonts, low resolution, visible stock-image watermarks, or screenshots that show a different game from the icon. Genuine studios don't ship blurry store art.
5. The name
Extra words are the tell: "Minecraft Pocket Edition Free 2026," "Roblox Mod Master," "FREE Robux Generator." Real titles are short.
Know when something new is installed
Defenras alerts you when a new app appears on your child's device — before it's been open for a week.
Get Defenras free →Preventing installs in the first place
iPhone
- Screen Time → Content & Privacy Restrictions → iTunes & App Store Purchases → Installing Apps → Don't Allow.
- Turn on Ask to Buy in Family Sharing so requests come to you — including for free apps.
Android
- Family Link → Controls → Content restrictions → Google Play → require approval for all downloads.
- Turn off sideloading: Settings → Apps → Special app access → Install unknown apps → off for every browser and file manager.
- Confirm Play Protect is on under Play Store → profile → Play Protect.
Sideloading is where the genuinely dangerous Android apps come from. An APK downloaded from a site promising a free premium version of a game is malware in the overwhelming majority of cases.
If one is already installed
- Delete it.
- Check subscriptions. iPhone: Settings → your name → Subscriptions. Android: Play Store → profile → Payments and subscriptions. Deleting the app does not cancel the subscription.
- Request a refund — reportaproblem.apple.com or the Play Store order history.
- Change passwords for any account the app asked your child to log into, and turn on two-factor authentication.
- Review permissions of remaining apps: Settings → Privacy (iOS) or Settings → Apps → Permission manager (Android).
Every "free Robux," "free V-Bucks," and "game currency generator" app or site is a scam — without exception. The mechanism is always the same: it asks for the account login to "deliver" the currency, and the account is stolen and resold. Kids know these are too good to be true and try them anyway because the downside seems small. Explaining the actual mechanism — this is how the account gets taken — lands considerably better than "don't use those."
Frequently asked questions
Are apps in the official stores always safe?
No. Both stores review submissions and both let copycats through regularly. Store presence means reviewed, not trustworthy.
How do I know if an app is charging us?
Check the subscriptions list on the account, not the app. Deleting an app never cancels its subscription — that catches out a lot of families.
Is sideloading on Android always dangerous?
Not inherently, but for a child's device there's no good reason for it. APKs from sites offering free premium versions of paid games are malware more often than not.
What's the single best check?
The developer name. It takes two seconds and catches nearly every copycat.
Defenras blocks all of this — without collecting your child's data.
One app, every device, every browser. Adult content, gambling, vaping, scams, malware, social media — all blocked. PIN-locked. Free version available, no credit card.