# How to Spot a Fake Cricket App: 10 Checks Source: https://cricketin.org/guides/how-to-spot-a-fake-cricket-app [By Farhan Qureshi](/authors/payments-expert), Payments Expert. [Reviewed by Rajeev Sathe](/authors/editor-in-chief), Editor-in-Chief. Updated 25 Aug 2026. Editorial policy: https://cricketin.org/editorial-policy 18+ Betting money on cricket carries a direct risk of financial loss, and it can become an addiction. Real-money online gaming is banned across India under the PROG Act 2025, which came into force on 1 May 2026. If betting is already costing you money you need, or sleep, or people close to you, the free Tele-MANAS helpline is **14416**, and it runs in 20 languages. Our [page on help for gambling harm](/guides/help-for-gambling-harm-india) lists what else exists. --- Ten quick checks on any cricket app: link source, publisher, permissions, phone warnings, payee name, withdrawal terms and legality claims. Ten checks catch most fake cricket apps. Where the link came from. Who published it. What permissions it wants. Whether your phone warned you. Who receives the money. Whether a real company stands behind it. Whether a named person is responsible. What the withdrawal clause says. How the reviews are shaped. What it claims about law and tax. Each check takes under a minute. The last section matters most. Passing all ten still does not make a real-money game lawful in India. ## Why fake cricket apps work so well A fake app does not need to be clever. It needs to look ordinary for a few minutes. That is a low bar. The logo is copied. The screens are copied. The match list is real, because live scores are public. By the time anything feels wrong, the app already has your documents and your first deposit. Google describes the method in plain terms. Bad actors hide behind anonymity, pose as developers, and use a brand image to build convincing fake apps ([Android Developers Blog](https://android-developers.googleblog.com/2025/08/elevating-android-security.html)). That is the whole trick: a familiar logo and a familiar promise. The odds are also against you before you start. Google's analysis found over fifty times more malware from internet-sideloaded sources than in apps on Google Play ([Google](https://android-developers.googleblog.com/2025/08/elevating-android-security.html)). Internet-sideloading is Google's name for downloads that arrive through browsers, messaging apps or file managers ([Google security blog](https://security.googleblog.com/2024/02/piloting-new-ways-to-protect-Android-users-from%20financial-fraud.html)). Below are ten checks. Each takes under a minute. None needs a special tool. None of them names an app, and none is a route to one. Use them in order. The early checks are about where the app came from. The later ones are about what it plans to do with your money. Any single stop signal is enough to walk away. ## The ten checks, one by one ### 1. Ask where the link came from Start with the delivery, not the app. A link in a group chat, a comment or a forwarded message is the weakest possible source. Google groups messaging apps, browsers and file managers together. It calls them internet-sideloading sources. They lack the review a store applies ([Google security blog](https://security.googleblog.com/2024/02/piloting-new-ways-to-protect-Android-users-from%20financial-fraud.html)). If the answer is "someone sent it", the check has already failed. ### 2. Look for a publisher with a history A real app has a publisher you can name. It has a past. It has other work. Google has run verification requirements on Play since 2023, and is extending developer verification more widely ([Android Developers Blog](https://android-developers.googleblog.com/2025/08/elevating-android-security.html)). A file with no traceable publisher sits outside all of that. No name, no history, no accountability. ### 3. Read the permission list before you agree to it Android protects two things through permissions: restricted data, like your contacts, and restricted actions, like recording audio ([Permissions on Android](https://developer.android.com/guide/topics/permissions/overview)). Ask a simple question of every request. What cricket feature needs this? Message access, notification access and accessibility access fail that question every time. Google Play limits accessibility tools to services built for people with disabilities ([Play policy](https://support.google.com/googleplay/android-developer/answer/10964491?hl=en)). ### 4. Notice whether your phone already warned you Your phone often answers this question for you. Play Protect blocks sideloaded apps that ask for RECEIVE_SMS, READ_SMS, NOTIFICATION_LISTENER or ACCESSIBILITY. Google says those four are often abused for financial fraud ([Play Protect guidance](https://developers.google.com/android/play-protect/warning-dev-guidance)). It also shows a prompt when it has never seen an app before ([Google](https://developers.google.com/android/play-protect/warning-dev-guidance)). Read the warning as a finding. It is the most honest review the app will ever get. ### 5. Look at who is actually receiving the money Watch the payee name on the payment screen. A company name is one thing. A personal name, or an unrelated business, is another. This is where most losses begin, and our page on [what happens to a UPI payment](/guides/upi-and-online-gaming-payments) follows the trail. A mismatch between the app and the payee means you have no record linking your money to any promise. ### 6. Check whether a real company stands behind it Look for a registered company name, a country and an address. Then look for the same details in the terms, the privacy notice and the payment screen. If the three do not match, treat it as one finding, not three. And remember the setting. The PROG Act 2025 has been in force since 1 May 2026, and it reaches offshore operators serving India ([Nishith Desai analysis](https://nishithdesai.com/research-and-articles/hotline/gaming-law-wrap/setting-the-rules-of-the-game-indias-online-gaming-law-comes-into-force-15586)). ### 7. Look for a named human who is responsible Real services put people on the record. A grievance officer. A support address that answers. A name you can write to. Indian data rules assume this. A data fiduciary must publish how a person can use their rights. It must also give contact details for someone who can answer questions after a breach ([DPDP Rules, 2025, Rules 14 and 7](https://www.dpdpa.com/DPDP_Rules_2025_English_only.pdf)). A chat bot is not that. ### 8. Read the withdrawal clause, not the deposit page Deposits are always easy. That is not information. Go to the terms and find the section on paying you out. Look for what can hold your money: verification steps, review periods, minimum limits, closed markets. If the deposit takes seconds and the payout takes a review with no time limit, you have found the real product. Our page on [how wagering requirements work](/guides/wagering-requirements-explained) shows how that maths runs against you. ### 9. Look at the shape of the reviews, not the score A score is easy to buy. A pattern is harder to fake. So read the reviews, do not count them. Look for reviews all posted in the same week, in the same voice, praising the same thing. Then look for the ones that mention a payout actually arriving. Absence there says more than any five-star average. ### 10. Read what it claims about the law and about tax This check is the fastest of the ten. Some apps claim real-money play is legal in your state. Some claim winnings are tax free. Either claim tells you the app is lying to you. Tax is deducted on net winnings from online games under Section 194BA, with no minimum threshold ([Income Tax Department](https://www.incometaxindia.gov.in/w/winnings-from-online-games)). And the ban under the PROG Act 2025 applies across the country ([Nishith Desai](https://nishithdesai.com/research-and-articles/hotline/gaming-law-wrap/setting-the-rules-of-the-game-indias-online-gaming-law-comes-into-force-15586)). Our [state-by-state page](/legal/state-by-state) covers why no state works as an exception now. ## The ten checks as one list **Table 1. Ten checks, and the finding that should stop you** | # | Check | Stop signal | |---|---|---| | 1 | Where the link came from | A chat, a comment or a forward | | 2 | Who the publisher is | No name you can trace | | 3 | What permissions it wants | Messages, notifications or accessibility | | 4 | Whether the phone warned you | A Play Protect block or an unknown-app prompt | | 5 | Who receives the money | A personal or unrelated payee | | 6 | Whether a company stands behind it | No entity, or three different ones | | 7 | Whether a named person is responsible | No grievance contact anywhere | | 8 | What the withdrawal clause says | Open-ended reviews and holds | | 9 | What the review pattern looks like | One week, one voice, no payout stories | | 10 | What it claims about law and tax | "Legal in your state", or "no tax" | ## Passing all ten still does not make it legal This is the part we will not soften. The checks are about fakes. They are not about legality. An app can be genuine, well built, honest about its owner, and still be an offence to run and to fund in India. Section 5 of the PROG Act 2025 bans offering a money gaming service. Section 7 bans moving funds for one ([Act text, MeitY](https://www.meity.gov.in/static/uploads/2025/10/8a7f103cefc68ed8aaa2ebc9a2ed7c13.pdf)). There is also a reason these apps are not in the store. Google Play permits real money gambling apps only in select countries. The operator must be licensed, must hold a valid licence for that country, and must pass an application process ([Google Play policy](https://support.google.com/googleplay/android-developer/answer/9877032?hl=en)). So the ten checks answer one question. Is this app what it claims to be? They cannot answer the second question at all. That one is about the law, not the file. Our [Act explainer](/legal/prog-act-2025-explained) and the [2026 legal answer](/legal/online-betting-law-india) handle it. Keep the two questions apart in your head. A safe file and a lawful activity are different things. ## If something is already installed Then the useful question changes. It is no longer about the app. It is about your exposure. - Your documents may already be copied. UIDAI warns against sharing Aadhaar photocopies at all. It says a masked version shows only the last four digits ([UIDAI advisory via PIB](https://www.pib.gov.in/PressReleasePage.aspx?PRID=1828797)). - Your bank is a separate matter from the app. Complaints about your bank's service run through the Reserve Bank Integrated Ombudsman Scheme, in force from 1 July 2026. It needs a written complaint to the bank first, then 30 days ([RB-IOS 2026](https://webassets.rbl.bank.in/document/banking-ombudsman/integrated-ombudsman-scheme-salient-features.pdf)). - Online financial fraud can be reported on national helpline 1930 ([National Cyber Crime Reporting Portal](https://cybercrime.gov.in/Webform/Crime_NodalGrivanceList.aspx)). One more thing worth doing early. Write down what you have, while you still remember it: dates, amounts, the payee name on each payment, and any reference numbers. A weak complaint is usually a complaint made from memory six weeks later. We are not lawyers and this is not legal advice. If money is gone, a lawyer who handles cyber and payment matters is the right call. Our [how we test and verify page](/how-we-test) is honest about where our own limits sit. ## What we do not list here No app names, safe or unsafe. No links, mirrors or stores. No "verified" list of any kind. Section 6 of the PROG Act 2025 bans advertising a money game directly or indirectly ([MeitY](https://www.meity.gov.in/static/uploads/2025/10/8a7f103cefc68ed8aaa2ebc9a2ed7c13.pdf)). A list of apps we called clean would function as exactly that, and our [page on the ad rules](/legal/advertising-rules-online-gaming) explains why. The other explainers are in the [guides hub](/guides), and [the sideloading page](/guides/apk-sideloading-risks) covers the technical side in full. ## Questions people ask ### What is the single fastest sign an app is fake? A claim that real-money play is legal in your state. Nothing in Indian law supports that after 1 May 2026 ([Nishith Desai analysis](https://nishithdesai.com/research-and-articles/hotline/gaming-law-wrap/setting-the-rules-of-the-game-indias-online-gaming-law-comes-into-force-15586)). One sentence in the marketing does the job of ten technical checks. ### Does a high store rating mean an app is genuine? No. A rating is a number that can be bought. Look at the pattern instead: the dates, the wording, and whether anyone describes a payout that actually arrived. ### My phone blocked the install. Should I look for another version? We will not help with that, and the block itself is the answer. Play Protect blocks sideloaded apps declaring message, notification or accessibility permissions because they are frequently abused for financial fraud ([Play Protect guidance](https://developers.google.com/android/play-protect/warning-dev-guidance)). ### Why can I not find these apps in the Play Store at all? Play policy allows real money gambling apps only in select countries. The operator must be licensed there and must pass an application process ([Google Play policy](https://support.google.com/googleplay/android-developer/answer/9877032?hl=en)). The absence is the policy working. ### Is there any list of approved cricket betting apps for India? No, and we would not publish one. Real-money gaming is banned across India under the PROG Act 2025, in force since 1 May 2026 ([Nishith Desai](https://nishithdesai.com/research-and-articles/hotline/gaming-law-wrap/setting-the-rules-of-the-game-indias-online-gaming-law-comes-into-force-15586)). Section 6 also bans advertising such services, directly or indirectly ([MeitY](https://www.meity.gov.in/static/uploads/2025/10/8a7f103cefc68ed8aaa2ebc9a2ed7c13.pdf)). ## More from the guides - [KYC for Online Gaming in India](/guides/kyc-in-online-gaming-india) - [ODI Cricket Rules Explained](/guides/odi-rules-explained) - [Frozen Payments in Online Gaming](/guides/payment-freeze-and-chargebacks) - [Self-Exclusion and Deposit Limits in India 2026](/guides/self-exclusion-and-limits) - [Signs of Gambling Addiction](/guides/signs-of-gambling-addiction) - [T20 Cricket Rules Explained](/guides/t20-rules-explained) - [Test Cricket Rules Explained](/guides/test-cricket-explained) - [UPI and Online Gaming Payments in India](/guides/upi-and-online-gaming-payments) - [Wagering Requirements](/guides/wagering-requirements-explained) - [Supreme Court on Online Gaming](/legal/supreme-court-online-gaming-cases) - [TDS on Online Gaming Winnings](/legal/tds-on-winnings-india) - [Caribbean Premier League 2026 — live schedule and table](/leagues/cpl)