Scam Radar

How can you recognize Fake Facebook ads push malicious Android apps that silently subscribe users to paid services?

Published

Listen to the episode

TLDR

CERT Polska uncovered a large scale toll fraud operation targeting Polish users via Facebook advertisements. The ads claimed that a popular PDF reader had lost support and lured victims into installing fake apps (Messenger Pro, Phone...

How it works

CERT Polska uncovered a large scale toll fraud operation targeting Polish users via Facebook advertisements. The ads claimed that a popular PDF reader had lost support and lured victims into installing fake apps (Messenger Pro, Phone...

Red flags

  • or silent browser based DCB flows with no on screen confirmation

What to do

  1. 1Never install apps promoted by alarming Facebook ads
  2. 2verify updates inside the official app or vendor site. Review your phone bill and carrier self service portal for unknown premium SMS or DCB subscriptions and request a refund. Revoke SMS permissions, uninstall the suspicious app, and run a reputable mobile antivirus scan
  3. 3consider blo

Source

cert-pl

Source reviewed by Mythos Forensic Team

https://cert.pl/posts/2026/09/analiza-tollfraud/

FAQ

Is Fake Facebook ads push malicious Android apps that silently subscribe users to paid services a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

or silent browser based DCB flows with no on screen confirmation

What should I do first?

Never install apps promoted by alarming Facebook ads; verify updates inside the official app or vendor site. Review your phone bill and carrier self service portal for unknown premium SMS or DCB subscriptions and request a refund. Revoke SMS permissions, uninstall the suspicious app, and run a reputable mobile antivirus scan; consider blo

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.