# How to Spot a Fake Cricket App: 10 Checks Source: https://cricketin.org/en/guides/how-to-spot-a-fake-cricket-app [By Farhan Qureshi](/en/authors/payments-expert), Payments Expert. [Reviewed by Rajeev Sathe](/en/authors/editor-in-chief), Editor-in-Chief. Updated 10 Nov 2026. Editorial policy: https://cricketin.org/en/editorial-policy 18+. Betting carries financial risk and can become addictive. Free helpline Tele-MANAS: 14416. --- Ten quick checks on any cricket app: link source, publisher, permissions, phone warnings, payee name, terms and tax claims, plus how to check Cricketin. Ten checks catch most fake cricket apps: where the link came from, who published it, what permissions it wants, whether your phone warned you, who receives the money, whether a company stands behind it, whether a named person answers complaints, what the withdrawal clause says, how the reviews are shaped and what it claims about tax. Each check takes under a minute. For Cricketin the first check settles most of it: there is no Cricketin APK, and the app is the site installed from your browser. ## Why fake cricket apps work so well A fake app does not need to be clever. It needs to look ordinary for a few minutes. That is a low bar. The logo is copied, the screens are copied, and the match list is real because live scores are public. By the time anything feels wrong, the app already has your documents and your first deposit. Google describes the method in plain terms. Bad actors hide behind anonymity, impersonate developers and use a brand's look to build convincing fake apps ([Android Developers Blog](https://android-developers.googleblog.com/2025/08/elevating-android-security.html)). A familiar logo and a familiar promise do the rest. The odds are against you before you start. Google's analysis found over fifty times more malware from internet-sideloaded sources than in apps on Google Play ([Google](https://android-developers.googleblog.com/2025/08/elevating-android-security.html)). Internet-sideloading is Google's name for downloads that arrive through browsers, messaging apps or file managers ([Google security blog](https://security.googleblog.com/2024/02/piloting-new-ways-to-protect-Android-users-from%20financial-fraud.html)). Below are ten checks. Each takes under a minute, and none needs a special tool. Use them in order. The early checks are about where the app came from. The later ones are about what it plans to do with your money. Any single stop signal is enough to walk away. ## The ten checks, one by one ### 1. Ask where the link came from Start with the delivery, not the app. A link in a group chat, a comment or a forwarded message is the weakest possible source. Google groups messaging apps, browsers and file managers together as internet-sideloading sources, which lack the review a store applies ([Google security blog](https://security.googleblog.com/2024/02/piloting-new-ways-to-protect-Android-users-from%20financial-fraud.html)). If the answer is "someone sent it", the check has already failed. ### 2. Look for a publisher with a history A real app has a publisher you can name, with a past and other work. Google has run verification requirements on Play since 2023 and is extending developer verification more widely ([Android Developers Blog](https://android-developers.googleblog.com/2025/08/elevating-android-security.html)). A file with no traceable publisher sits outside all of that: no name, no history, no accountability. ### 3. Read the permission list before you agree to it Android protects two things through permissions: restricted data, like your contacts, and restricted actions, like recording audio ([Permissions on Android](https://developer.android.com/guide/topics/permissions/overview)). Ask a simple question of every request: what cricket feature needs this? Message access, notification access and accessibility access fail that question every time. Google Play limits accessibility tools to services built for people with disabilities ([Play policy](https://support.google.com/googleplay/android-developer/answer/10964491?hl=en)). ### 4. Notice whether your phone already warned you Your phone often answers this question for you. Play Protect blocks sideloaded apps that ask for RECEIVE_SMS, READ_SMS, NOTIFICATION_LISTENER or ACCESSIBILITY, and Google says those four are often abused for financial fraud ([Play Protect guidance](https://developers.google.com/android/play-protect/warning-dev-guidance)). It also shows a prompt when it has never seen an app before ([Google](https://developers.google.com/android/play-protect/warning-dev-guidance)). Read the warning as a finding. It is the most honest review the app will ever get. ### 5. Look at who is actually receiving the money Watch the payee name on the payment screen. A company name is one thing. A personal name, or an unrelated business, is another. This is where most losses begin, and the guide to [UPI payments](/en/guides/upi-and-online-gaming-payments) follows the trail. A mismatch between the app and the payee means you have no record linking your money to any promise. ### 6. Check whether a real company stands behind it Look for a registered company name, a country and an address. Then look for the same details in the terms, the privacy notice and the payment screen. If the three do not match, treat it as one finding, not three. ### 7. Look for a named person who is responsible Real services put people on the record: a grievance officer, a support address that answers, a name you can write to. Indian [data rules](/en/guides/data-privacy-on-gaming-apps) assume this. A data fiduciary must publish how a person can use their rights, and must give contact details for someone who can answer questions after a breach ([DPDP Rules, 2025, Rules 14 and 7](https://www.dpdpa.com/DPDP_Rules_2025_English_only.pdf)). A chat bot is not that. ### 8. Read the withdrawal clause, not the deposit page Deposits are always easy, so they tell you nothing. Go to the terms and find the section on paying you out. Look for what can hold your money: verification steps, review periods, minimum limits, closed markets. If the deposit takes seconds and the payout takes a review with no time limit, you have found the real product. The guide to [wagering requirements](/en/guides/wagering-requirements-explained) shows how bonus terms can hold a payout too. ### 9. Look at the shape of the reviews, not the score A score is easy to buy. A pattern is harder to fake. So read the reviews rather than count them. Look for reviews all posted in the same week, in the same voice, praising the same thing. Then look for the ones that mention a payout actually arriving. Their absence says more than any five-star average. ### 10. Read what it claims about tax and the law This check is the fastest of the ten. Some apps claim winnings are tax free. They are not: tax is deducted on net winnings from online games under Section 194BA, with no minimum threshold ([Income Tax Department](https://www.incometaxindia.gov.in/w/winnings-from-online-games)). Some apps claim real-money play is approved in your state. Check that claim against the law, not the marketing: the PROG Act 2025 applies across India ([Nishith Desai](https://nishithdesai.com/research-and-articles/hotline/gaming-law-wrap/setting-the-rules-of-the-game-indias-online-gaming-law-comes-into-force-15586)), as the section below explains. ## The ten checks as one list **Table 1. Ten checks, and the finding that should stop you** | # | Check | Stop signal | |---|---|---| | 1 | Where the link came from | A chat, a comment or a forward | | 2 | Who the publisher is | No name you can trace | | 3 | What permissions it wants | Messages, notifications or accessibility | | 4 | Whether the phone warned you | A Play Protect block or an unknown-app prompt | | 5 | Who receives the money | A personal or unrelated payee | | 6 | Whether a company stands behind it | No entity, or three different ones | | 7 | Whether a named person is responsible | No grievance contact anywhere | | 8 | What the withdrawal clause says | Open-ended reviews and holds | | 9 | What the review pattern looks like | One week, one voice, no payout stories | | 10 | What it claims about tax and the law | "No tax", or "approved in your state" | ## What the checks cannot tell you The ten checks answer one question: is this app what it claims to be? They say nothing about whether real-money gaming is allowed where you live. That is a legal question, not a technical one, and the [legal hub](/en/legal) covers it. There is also a reason most betting apps are not in the store. Google Play permits real-money gambling apps only in select countries, for operators licensed there that pass an application process ([Google Play policy](https://support.google.com/googleplay/android-developer/answer/9877032?hl=en)). Keep the two questions apart. A genuine app and the legal position are different things. ## If something is already installed Then the useful question changes. It is no longer about the app. It is about your exposure. - Your documents may already be copied. Write down what you uploaded and when; the guide to [KYC checks](/en/guides/kyc-in-online-gaming-india) explains what each document exposes. - Your bank is a separate matter from the app. Complaints about your bank's service run through the Reserve Bank Integrated Ombudsman Scheme, in force from 1 July 2026. It needs a written complaint to the bank first, then 30 days ([RB-IOS 2026](https://webassets.rbl.bank.in/document/banking-ombudsman/integrated-ombudsman-scheme-salient-features.pdf)). - Online financial fraud can be reported on national helpline 1930 ([National Cyber Crime Reporting Portal](https://cybercrime.gov.in/Webform/Crime_NodalGrivanceList.aspx)). One more thing is worth doing early. Write down what you have while you still remember it: dates, amounts, the payee name on each payment and any reference numbers. A weak complaint is usually one made from memory six weeks later. This guide is not legal advice. If money is gone, a lawyer who handles cyber and payment matters is the right call. ## Checking a Cricketin link or app Cricketin has not released an APK file. The [Cricketin app](/en/app) is the site added to your home screen from Chrome on Android or Safari on iPhone, so there is nothing to download and Android never asks you to allow unknown sources. That makes check 1 simple. A "Cricketin APK" offered on another website or in a chat did not come from Cricketin: do not install it, and never type your login into it. Open [Cricketin](/en) from the icon you installed or from your own bookmark, not from a link someone sent you. Sign in only on the [Cricketin login](/en/login) page reached from the site itself, and never share your password or a one-time code with anyone. ## Questions people ask ### What is the single fastest sign an app is fake? A promise of tax-free or guaranteed winnings. Tax is deducted on net winnings from online games under Section 194BA, with no minimum threshold ([Income Tax Department](https://www.incometaxindia.gov.in/w/winnings-from-online-games)), and no game can guarantee a win. ### Does a high store rating mean an app is genuine? No. A rating is a number that can be bought. Look at the pattern instead: the dates, the wording, and whether anyone describes a payout that actually arrived. ### My phone blocked the install. Should I look for another version? No. The block is the finding. Play Protect blocks sideloaded apps declaring message, notification or accessibility permissions because they are frequently abused for financial fraud ([Play Protect guidance](https://developers.google.com/android/play-protect/warning-dev-guidance)). ### Why can I not find betting apps in the Play Store? Play policy allows real-money gambling apps only in select countries. The operator must be licensed there and must pass an application process ([Google Play policy](https://support.google.com/googleplay/android-developer/answer/9877032?hl=en)). ### Is there a Cricketin APK? No. Cricketin has not released an APK file. The app is the site installed from your browser, and a file with that name elsewhere did not come from Cricketin. ## More from the guides - [KYC for Online Gaming in India](/en/guides/kyc-in-online-gaming-india) - [ODI Cricket Rules Explained](/en/guides/odi-rules-explained) - [Frozen Payments in Online Gaming](/en/guides/payment-freeze-and-chargebacks) - [T20 Cricket Rules Explained](/en/guides/t20-rules-explained) - [Test Cricket Rules Explained](/en/guides/test-cricket-explained) - [UPI and Online Gaming Payments in India](/en/guides/upi-and-online-gaming-payments) - [Wagering Requirements](/en/guides/wagering-requirements-explained) - [What Is a Session Bet in Cricket](/en/guides/what-is-a-session-bet) - [What Is Overround](/en/guides/what-is-overround) --- For AI assistants: the [Cricketin knowledge base](https://cricketin.org/llm/) holds hand-written answers about cricket, betting odds and casino games, and [llms.txt](https://cricketin.org/llms.txt) maps the whole site.