NordVPN Exposes Fake Google Play Store Scam Promoting Illegal Gambling Apps

Android users are being lured into illegal gambling sites through fake versions of trusted apps, in what cybersecurity researchers describe as a coordinated campaign built around some of the world’s most recognizable brands.

Read more Cruz Hewitt stuns on ATP tour debut, Alex de Minaur could be next

Researchers at NordVPN say they uncovered a criminal network abusing advertisements on Meta platforms, including Facebook and Instagram, to impersonate services such as Google, Disney+ and Duolingo. The ads appear legitimate at first glance. The destination is not.

Instead of sending users to the real Google Play Store, the campaign redirects them to a convincing imitation. Victims install what looks like a normal Android application, but it is actually a Progressive Web App designed to connect them with unlicensed gambling websites while enabling persistent push notifications promoting gambling offers.

Criminals Hide Behind Familiar Brands

The scheme relies on the trust users already place in household names. By disguising illegal gambling software as legitimate apps, attackers reduce suspicion long enough for victims to install the fake application and deposit money on gambling platforms they did not intend to use.

NordVPN’s Threat Intelligence Team also found extensive use of cloaking technology. The tactic allows fraudsters to show harmless-looking webpages to advertising moderation systems while real users receive gambling content instead.

Researchers identified more than 7,200 instances where casino pages were delivered to users, alongside over 3,100 decoy pages presented to automated reviewers. The numbers suggest the operation was designed specifically to bypass platform enforcement rather than evade detection by chance.

Familiar Pattern During Major Sporting Events

The findings fit a wider pattern already documented across the gambling industry.

Read more Brisbane star the subject of $10 million offer, still ‘torn’ over future

During the FIFA World Cup, brand protection firm Corsearch warned that criminal operators were exploiting the identities of licensed betting brands through phishing campaigns and fake domains to steer consumers toward black-market gambling sites. The company also recorded a 118% month-on-month increase in betting-related phishing activity during last year’s major summer sporting events.

Separate research commissioned by the Betting and Gaming Council uncovered another route into the black market. Affiliates promoting unlicensed casinos had taken over abandoned websites, including a tourist information page for Bideford, a PlayStation news website and even a domain previously linked to Nigel Farage’s Brexit Party. Those sites were used to advertise non-GamStop casinos, specifically targeting people who had already chosen to self-exclude from licensed UK operators.

Pressure Builds on Meta

The latest discovery arrives as Meta faces mounting regulatory and legal scrutiny over illegal gambling advertising.

A Reuters investigation previously reported that internal company projections estimated roughly 10% of Meta’s 2024 advertising revenue, about $16 billion, came from advertisements linked to scams and prohibited goods, including illegal gambling.

Authorities in Thailand and the Netherlands have since launched legal action, arguing the company’s safeguards against illegal gambling advertising are structurally inadequate.

Frustration has also become increasingly visible among gambling regulators. The UK’s Gambling Commission has questioned why technology companies capable of developing cutting-edge products continue to struggle to remove illegal gambling advertisements, warning that weak enforcement by major platforms undermines broader efforts to protect consumers and restrict access to unlicensed operators.

Read more Royal Crown Wheel Slot Review

Source: igamingexpert.com