Deceptive Apps Are Using Google Play Early Access to Hide From Reviews — One Passed 1M Installs
Security researchers at Bitdefender say scammers have found a way to publish apps on Google Play with the store's two clearest warning signs switched off. By listing an app through Early Access, Google's open testing track, developers get a normal-looking Play listing that carries no public star rating and no user reviews — and thousands of those listings turn out to be fake casino games, bogus reward apps and trademark knock-offs. One of them, a Grand Theft Auto imitator called Vice Streets: Open World, has passed a million installs without a single review on its page.

Why an Early Access listing has no reviews
Early Access is the user-facing name for Google Play's open testing track. It exists so developers can ship an unfinished app, gather feedback and iterate before a full launch. Google's own developer documentation is explicit that testers cannot leave public reviews on Play for test versions — the point being to stop rough pre-release builds from dragging down a finished app's rating later.
That protection cuts the other way when the app was never meant to be finished. An app parked in Early Access indefinitely gets a store page with no rating to be lowered, no one-star complaints from people who were scammed, and no way for the next person to be warned by the last one. The listing still looks and installs like any other Play app.
What the apps actually are
The listings Bitdefender flagged cluster into a few recognisable shapes:
- Casino and slot-style games — Chicken Road and Ice Fishing are two named examples.
- "Earn money" and reward apps promising PayPal payouts, cryptocurrency, gift cards or free spins.
- Trademark knock-offs, including a fraudulent listing riding on the Grand Theft Auto name.
- Plain utilities — PDF readers and QR scanners among them — that exist mainly to serve ads.
None of the reward apps pay out. What follows installation is a stream of adverts, which is where the money comes from: the developer is paid for impressions, and the promised jackpot never arrives. Several developers appeared repeatedly across the listings, and multiple apps showed install counts in the thousands.
The ads that push them are the bigger problem
Nobody finds these apps by browsing Play. They are pushed hard on TikTok, Facebook and other social platforms, and Bitdefender found campaigns using AI-generated deepfakes of celebrities to sell the payout claim. The Play listing is the last step in the funnel, not the first — which is why the missing reviews matter so much. Someone arriving from an advert has no independent signal left to check.
How to check before you install
There is no Early Access filter in the Play app, so the check is manual. Open the store listing and look at the block under the app name and icon:
- No star rating and no review count. A production app that has been installed a million times always has both. If that area is blank or shows an early access note instead, the app is on the testing track.
- Install count out of step with everything else. Hundreds of thousands of downloads and zero reviews is not a new app finding its feet.
- The developer's other listings. Tap the developer name. A page full of near-identical casino or reward apps is the pattern researchers kept hitting.
- The promise itself. An app on Play that says it will pay you real money for tapping a screen is the claim to distrust, whatever the listing looks like.
Bitdefender says it notified Google of the findings and that Google confirmed it is investigating. Nothing has been announced about changing how Early Access listings are presented.
Google's verification push does not cover this
It is worth being clear about what is and is not being fixed, because the timing invites confusion. Google's developer verification requirement takes effect in Brazil, Indonesia, Singapore and Thailand from September 2026, expanding to more regions from 2027. That rule is aimed at apps installed outside Play on certified Android devices, and it makes anonymous distribution harder.
It does not touch Early Access. The apps described here are on Google Play, published by developers who already have Play Console accounts. Any fix for the review blind spot has to come from how Play presents the testing track itself. Until it does, the absence of a rating on a Play listing is information — treat it as one. We have covered the separate sideloading rules Google is rolling out, and the on-device scam warnings arriving in WhatsApp, both of which target different links in the same chain.
Frequently Asked Questions
What is Early Access on Google Play?
Early Access is the user-facing name for Google Play's open testing track. It lets developers publish an unfinished app so people can try it and send feedback before a full release. Because the build is a test version, Google does not show public star ratings or user reviews on the listing.
How can I tell if a Play Store app is in Early Access?
Open the app's store listing and look at the strip under the app name and icon, where the star rating and review count normally sit. On an Early Access listing that area has no rating and no reviews, and the page may carry an early access label instead. A large install count with zero reviews is the clearest tell.
Are Early Access apps on Google Play unsafe?
Not inherently. Plenty of legitimate developers use the track exactly as intended, to test a real app before launch. The risk is that the missing rating and reviews remove the two signals most people rely on, so a deceptive app can sit there without accumulating public complaints.
Do the reward and cash apps advertised on TikTok actually pay out?
The ones examined in this research did not. After installation they serve continuous adverts, which is how the developers make money, and the promised PayPal payouts, gift cards, crypto or casino winnings never arrive. Many of the adverts driving installs used AI-generated deepfakes of celebrities.
Does Google's new developer verification rule stop this?
No. Developer verification takes effect in Brazil, Indonesia, Singapore and Thailand from September 2026 and applies to apps installed outside Google Play on certified Android devices. The Early Access apps in question are published on Play itself by developers with existing Play Console accounts, so the rule does not apply to them.





