This dangerous ‘CallPhantom’ scam is spread across 28 Google Play apps, downloaded over 7 million times – here’s what we know

ESET detected 28 fraudulent apps on Google Play, downloaded 7.3 million times, falsely claiming to reveal call/text/whatsapp histories
Apps generated fake data and charged $6-$80 subscriptions, with most victims in India
Google removed the apps and refunded Play-based payments, but third-party payment victims must seek refunds directly

Google has removed more than two dozen Android applications from the Play Store for promising users something it can’t deliver — and charging a hefty sum of money for it.

Security researchers ESET found 28 apps on Google’s Android stock that claimed to provide the call history of virtually any number. These apps also claimed to be able to retrieve people’s SMS records and WhatsApp call logs.

But the “service” doesn’t come for free — users were asked to purchase various subscription packages ranging from weekly to yearly, costing anywhere between $6 and $80.

CallPhantom

In total, the apps were downloaded more than 7.3 million times, ESET said. The worst part is that they did not and could not provide the service they advertised:

“In November 2025, we came across a Reddit post discussing an app called Call History of Any Number available on Google Play,” ESET explained. “Unsurprisingly, our analysis showed that the ‘call history’ data provided by this app is completely fabricated – the app generates random phone numbers and matches them with fixed names, call times and call durations that were embedded directly in the code.”

ESET named the campaign CallPhantom.

Most of the victims are in India. Many of the apps came with India’s +91 country code preselected and they supported UPI, which is a payment system primarily used in that country. ESET said the majority (53.7%) of all CallPhantom detections worldwide were found in India.

Victims were offered three ways to pay for the service. One is through Google Play’s official billing system, while the other two relied on third parties. Subscriptions made through Google Play can be canceled (and were canceled for all apps removed from storage), and victims can be compensated.

For the other two methods, users are advised to contact their payment provider for options.