Fraudulent WhatsApp impersonation app on Google Play

A fraudulent application impersonating ‘WhatsApp Messenger’ accumulated over 500,000 downloads on the Google Play Store before its removal. The deceptive app, attributed to a developer named ‘Agment Assets sallu’, utilized stolen icons, screenshots, and descriptions to mimic the official service provided by WhatsApp LLC.

Reports indicate the app appeared on the platform in September 2026 and may have exploited Google Play’s ‘early access’ program. This feature potentially allowed the developer to bypass public scrutiny by limiting the visibility of user reviews and ratings. In some cases, the fraudulent app appeared as a sponsored search result, placing it above the legitimate application.

As of October 2026, the fraudulent app has been removed from the Google Play Store. The incident highlights a potential loophole in the ‘Early Access’ program, which allowed the application to remain on the store for over a month without standard community scrutiny or security filters. This follows a similar pattern involving a fake Google Chrome application that previously gained over 100,000 downloads.

While there is no confirmed technical evidence of malware, data theft, or spying resulting from the WhatsApp clone, security analysts warn of significant risks regarding deceptive advertising and data collection. Experts advise users to verify the official developer, ‘WhatsApp LLC’, and avoid downloading apps through sponsored search links or unverified external sources.