Google Play Protect Warning Strings for Malware and MUwS Categories
Stay organized with collections
Save and categorize content based on your preferences.
When Google Play Protect detects a violation of the malware policy, a warning
will display for the user. Warning strings for each violation are available
below.
To learn more about malware and how we classify PHA categories see the following
links.
When Google Play Protect detects a backdoor, the following warning is shown
to users: "This app can allow unauthorized access to your data or
device."
Billing fraud
When Google Play Protect detects SMS fraud, the following warning is shown
to users: "This app can add unauthorized charges to your mobile bill by
sending costly SMS messages or registering for recurring charges."
Call Fraud
When Google Play Protect detects call fraud, the following warning is shown
to users: "This app can add unauthorized charges to your mobile bill by
making unauthorized calls."
Toll Fraud
When Google Play Protect detects a toll fraud, the following warning is
shown to users: "This app can add unauthorized charges to your mobile bill
by registering for recurring charges."
Stalkerware
When Google Play Protect detects stalkerware, the following warning
is shown to users: "This app can spy on you by monitoring your location or
your activity on this device."
Denial of Service (DoS)
When Google Play Protect detects DoS, the following warning is shown to
users: "This app tries to attack other mobile and computer systems."
Hostile Downloaders
When Google Play Protect detects a hostile downloader, the following
warning is shown to users: "This app can install potentially harmful apps
without your permission."
Non-Android Threat
When Google Play Protect detects a non-Android threat, the following
warning is shown to users: "This app can harm non-Android devices."
Phishing
When Google Play Protect detects phishing, the following warning is shown
to users: "This app is fake. It can steal your personal data, such as
banking info and passwords."
Elevated privilege abuse
When Google Play Protect detects elevated privilege abuse, the following
warning is shown to users: "This app tries to bypass Android's security
protections."
Ransomware
When Google Play Protect detects ransomware, the following warning is shown
to users: "This app can disable your device or threaten to reveal personal
information unless you pay money."
Rooting
When Google Play Protect detects rooting, the following warning is shown to
users: "This app tries to bypass Android's security protections."
Spam
When Google Play Protect detects spam, the following warning is shown to
users: "This app can spam other people with unauthorized messages."
Spyware
When Google Play Protect detects spyware, the following warning is shown to
users: "This app tries to spy on your personal data, such as SMS messages,
photos, audio recordings, or call history."
Trojan
When Google Play Protect detects a trojan, the following warning is shown
to users: "This app is fake. It tries to take over your device or steal
your data."
Click fraud
Where Google Play Protect detects a click fraud, the following warning
message is shown to users: "This app tries to use your device to commit
advertising fraud."
Data collection
When Google Play Protect detects data collection, the following warning
is shown to users: "This app can collect data that could be used to
track you."
Social Engineering
When Google Play Protect detects Social Engineering, the following warning
is shown to users: "This app looks like another app and can trick you
into exposing personal data, misusing your device, or installing
other apps."
Disruptive ads
When Google Play Protect detects disruptive ads, the following warning
is shown to users: “This app may display ads with unexpected behaviors
(for example, outside the app environment, cannot be easily dismissed,
or interfering with device functionality).”
Maskware
When Google Play Protect detects maskware, the following warning
is shown to users: “This app is harmful, it can put your device and data at risk.”
Content and code samples on this page are subject to the licenses described in the Content License. Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.
Last updated 2024-10-31 UTC.
[null,null,["Last updated 2024-10-31 UTC."],[[["\u003cp\u003eGoogle Play Protect displays warnings to users when it detects apps violating its malware policy, such as backdoors, billing fraud, or stalkerware.\u003c/p\u003e\n"],["\u003cp\u003eThese warnings clearly inform users about the potential harm, like unauthorized access, data theft, or spying.\u003c/p\u003e\n"],["\u003cp\u003eThe provided table lists various malware categories and their corresponding warning messages for user awareness.\u003c/p\u003e\n"],["\u003cp\u003eUsers can learn more about malware and Potentially Harmful Applications (PHAs) through provided links to relevant Google Play Protect resources.\u003c/p\u003e\n"]]],["Google Play Protect displays warnings to users when it detects malware policy violations. These warnings vary based on the detected category of Potentially Harmful Applications (PHA). Examples include warnings for backdoors (\"unauthorized access\"), billing fraud (\"unauthorized charges\"), stalkerware (\"spy on you\"), phishing (\"steal your data\"), ransomware (\"disable your device\"), spyware(\"spy on your data\"), and trojan (\"take over device or steal data\"). Other categories range from click fraud, social engineering, disruptive ads, to maskware.\n"],null,["# Google Play Protect Warning Strings for Malware and MUwS Categories\n\nWhen Google Play Protect detects a violation of the malware policy, a warning\nwill display for the user. Warning strings for each violation are available\nbelow.\n\nTo learn more about malware and how we classify PHA categories see the following\nlinks.\n\n- [Potentially Harmful Applications (PHAs)](/android/play-protect/potentially-harmful-applications)\n- [Potentially Harmful Application (PHAs) Categories](/android/play-protect/phacategories)\n\n| ||\n| Category | Warning message |\n| Backdoors | When Google Play Protect detects a backdoor, the following warning is shown to users: \"This app can allow unauthorized access to your data or device.\" |\n| Billing fraud | When Google Play Protect detects SMS fraud, the following warning is shown to users: \"This app can add unauthorized charges to your mobile bill by sending costly SMS messages or registering for recurring charges.\" |\n| Call Fraud | When Google Play Protect detects call fraud, the following warning is shown to users: \"This app can add unauthorized charges to your mobile bill by making unauthorized calls.\" |\n| Toll Fraud | When Google Play Protect detects a toll fraud, the following warning is shown to users: \"This app can add unauthorized charges to your mobile bill by registering for recurring charges.\" |\n| Stalkerware | When Google Play Protect detects stalkerware, the following warning is shown to users: \"This app can spy on you by monitoring your location or your activity on this device.\" |\n| Denial of Service (DoS) | When Google Play Protect detects DoS, the following warning is shown to users: \"This app tries to attack other mobile and computer systems.\" |\n| Hostile Downloaders | When Google Play Protect detects a hostile downloader, the following warning is shown to users: \"This app can install potentially harmful apps without your permission.\" |\n| Non-Android Threat | When Google Play Protect detects a non-Android threat, the following warning is shown to users: \"This app can harm non-Android devices.\" |\n| Phishing | When Google Play Protect detects phishing, the following warning is shown to users: \"This app is fake. It can steal your personal data, such as banking info and passwords.\" |\n| Elevated privilege abuse | When Google Play Protect detects elevated privilege abuse, the following warning is shown to users: \"This app tries to bypass Android's security protections.\" |\n| Ransomware | When Google Play Protect detects ransomware, the following warning is shown to users: \"This app can disable your device or threaten to reveal personal information unless you pay money.\" |\n| Rooting | When Google Play Protect detects rooting, the following warning is shown to users: \"This app tries to bypass Android's security protections.\" |\n| Spam | When Google Play Protect detects spam, the following warning is shown to users: \"This app can spam other people with unauthorized messages.\" |\n| Spyware | When Google Play Protect detects spyware, the following warning is shown to users: \"This app tries to spy on your personal data, such as SMS messages, photos, audio recordings, or call history.\" |\n| Trojan | When Google Play Protect detects a trojan, the following warning is shown to users: \"This app is fake. It tries to take over your device or steal your data.\" |\n| Click fraud | Where Google Play Protect detects a click fraud, the following warning message is shown to users: \"This app tries to use your device to commit advertising fraud.\" |\n| Data collection | When Google Play Protect detects data collection, the following warning is shown to users: \"This app can collect data that could be used to track you.\" |\n| Social Engineering | When Google Play Protect detects Social Engineering, the following warning is shown to users: \"This app looks like another app and can trick you into exposing personal data, misusing your device, or installing other apps.\" |\n| Disruptive ads | When Google Play Protect detects disruptive ads, the following warning is shown to users: \"This app may display ads with unexpected behaviors (for example, outside the app environment, cannot be easily dismissed, or interfering with device functionality).\" |\n| Maskware | When Google Play Protect detects maskware, the following warning is shown to users: \"This app is harmful, it can put your device and data at risk.\" |\n|--------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|"]]