Apps can be useful, fun and occasionally harmful. A minute of checking before you tap install saves a lot of trouble later.
Quick summary
- Download apps from your device’s official app store, not from links in messages or ads.
- Check the developer’s name, the number and content of reviews, and when the app was last updated.
- Be wary of apps that ask for permissions they don’t need, such as a torch app wanting your contacts.
- Keep apps updated and delete the ones you no longer use.
- Be extra cautious with apps involving money, investments or remote access to your device.
There’s an app for almost everything, and most are perfectly fine. But some collect more information than they need, and a few are designed to steal data or money. A quick check before installing, plus a little housekeeping, keeps your phone and information safer.
Use the official app store
Download apps from your device’s official app store. Apps there are reviewed, and harmful ones are removed when they’re found. Avoid installing apps from links in text messages, emails, social media ads or pop-ups.
Check before you tap install
- Developer: is it the real company? Fake apps sometimes copy the names and logos of banks and popular services.
- Reviews: read a few recent ones, including the low ratings. A flood of short, similar five-star reviews can be a warning sign.
- Downloads and updates: well-known apps usually have many downloads and recent updates.
- Description: poor spelling or vague descriptions can be a red flag.
If you’re downloading an app for your bank, a government service or a utility, follow the link from the organisation’s official website to make sure you get the right one.
Look at permissions
Apps ask for permission to use things like your camera, microphone, contacts and location. Ask whether each request makes sense:
| App | Reasonable request | Questionable request |
|---|---|---|
| Maps | Location | Contacts |
| Photo editor | Photos | Microphone |
| Torch or calculator | Little or nothing | Location, contacts or messages |
Many phones let you grant location access only while the app is open, and limit photo access to selected pictures.
Be careful
Never install an app because someone on the phone or in a message tells you to, especially apps that let someone control your device remotely. This is a common scam. Hang up and contact the organisation through its official channels.
Keep apps updated and tidy
- Turn on automatic app updates, as explained in our guide to software updates.
- Delete apps you no longer use; unused apps can still collect data and may stop receiving updates.
- Review permissions every few months in your phone’s privacy settings.
Money and investment apps
Be especially careful with apps that handle money, crypto or investments. Scammers create convincing fake trading apps. Our guide to spotting and reporting scams explains the warning signs and where to get help in Australia.
Your questions answered
Are apps in official stores always safe?
They’re much safer than apps from elsewhere, because stores review apps and remove harmful ones. But fake and poor-quality apps occasionally slip through, so it’s still worth checking before you install.
What if a message asks me to install an app?
Be very careful. Scammers sometimes ask people to install remote-access or ‘security’ apps. Don’t install apps because a caller or message tells you to; contact the organisation through its official website or phone number instead.
Should I give an app access to my location?
Only if it genuinely needs it, such as maps or weather. Many phones let you allow location only while the app is in use, which is a good middle ground.
How do I check what permissions an app has?
Open your phone’s settings, go to apps or privacy settings, and review what each app can access. Turn off anything that isn’t needed.
This guide is general information, not technical or legal advice. If you’ve lost money or personal information, contact your bank, IDCARE on 1800 595 160, or report it through ReportCyber at cyber.gov.au.