Cloned gambling apps are no longer confined to shady download portals. Through 2026 we have logged them inside official app stores, dressed as games, calculators and sports trackers. This briefing covers how they get there and how to check an app before it touches your money.
The most common trick this year. An app ships to the store as a harmless utility, a dice game or an odds calculator, and passes review in that form. After approval, a remote flag flips and the app loads a casino interface from a server. The store listing still shows the utility. Players report installs from listings created in June and July 2026 that behaved this way within days of approval.
These copy a real casino's name, icon and screenshots outright. They rely on speed, collecting deposits and login credentials for the week or two before the store pulls them. The developer account is always freshly created and usually lists a free email address rather than a company domain.
Ads and group chats push an APK download or an enterprise certificate install because the app is supposedly not allowed in your country. Outside a store there is no review at all, so these builds ask for contacts, SMS and accessibility permissions a casino has no business holding. Credential theft, not just deposit theft, is the goal.
One, the developer name should match the operating company on the casino's licence, not a generic studio name. Two, open the casino's own website and follow its app link rather than searching the store. Three, read the low ratings first, since victims post there within days. Four, check the requested permissions, a casino app needs nothing beyond network access and notifications. Five, compare the release date with the brand's age, a ten year old casino with an app released last month deserves a second look.
Delete the app, then change the password on the real casino account and on any account sharing that password. If you deposited through it, contact your bank or card issuer the same day, chargeback windows are generous but evidence gets weaker over time. Then report the listing, the store route is covered in our reporting guide along with regulator and registrar routes.