Google warns of fake VPN apps amid surging online scams
What's the story
Google has sounded the alarm over a surge in online scams, especially with Black Friday and Cyber Monday just around the corner. The tech giant said cybercriminals are using artificial intelligence (AI) and deceptive software to target consumers. One of the fastest-growing threats is malicious virtual private network (VPN) apps, which are being used by hackers to infiltrate user devices.
VPN deception
Malicious VPN apps: A new cyber threat
Hackers are disguising harmful software as trusted VPN tools, Google said in its report. These rogue apps often mimic popular VPN brands or use aggressive social-engineering tactics like sexually suggestive ads or fear-based messaging linked to geopolitical events. Once downloaded, these malicious apps can deliver a range of dangerous malware such as information-stealers, remote access trojans and banking trojans.
AI intervention
Google's defense against fake VPN apps
Google has revealed that Android and Google Play now rely heavily on machine learning to detect harmful apps. The company has also urged users to enable Google Play Protect, noting that its enhanced fraud-protection pilot can automatically help block the installation of highly risky apps obtained through sideloading from browsers, messaging apps or file managers.
Recruitment frauds
Surge in online job scams
Google has also flagged a sharp increase in scams targeting job seekers. Criminal groups are creating convincing replicas of recruitment websites, fake government job notices and fraudulent recruiter profiles. Victims are often asked to pay upfront fees or share sensitive documents during sham video interviews. Some even fall prey to malicious "interview software" that compromises their devices and corporate networks.
Extortion tactics
Businesses targeted by review-bombing campaigns
Businesses are also being hit with review-bombing campaigns designed to force them into paying extortion fees. After flooding a business profile with false one-star ratings, scammers reach out privately and threaten further damage unless money is paid. Google Maps is rolling out new reporting mechanisms to help merchants flag extortion attempts directly.
Tech frauds
AI product impersonation scams on the rise
With interest in AI tools at an all-time high, criminals are impersonating popular services to lure users into downloading harmful apps or fleeceware subscriptions. Fake offers of free access are heavily promoted through hijacked social-media accounts, cloaked ads and malicious code repositories. Google said its Play Store and Chrome Web Store enforcement teams continue to remove apps mimicking legitimate AI products.
Recovery frauds
Fraud recovery scams target previous victims
Individuals who have already lost money to scams are being approached again by fraudsters posing as investigators, government agencies or law firms claiming they can recover stolen funds. These operations often rely on convincing websites or AI-generated documents and demand upfront fees. Google highlighted that scam-notification tools in Messages and the Phone app provide early warnings before conversations become risky.