Fake Government App Download Scams via Email
How fraudulent emails direct citizens to install malicious apps disguised as official government tax, benefit, or identity apps, enabling credential theft and device compromise.
Part of: Fake Government App Download Scams
Last reviewed: 9 June 2026
Government app download scams delivered by email differ meaningfully from their SMS counterparts because the email format allows fraudsters to present a far more convincing official communication — complete with agency branding, formal language, a detailed explanation of why the app is needed, and multiple screenshots of the alleged app interface. An email from what appears to be a tax authority explaining that a new mandatory app must be installed has a very different weight from a brief SMS.
Email also allows fraudsters to target specific categories of taxpayers, benefit recipients, or government service users with tailored messaging. Someone who files a self-assessment tax return in the UK, for example, may receive an email specifically about a new HMRC app that appears to be addressed to their situation, rather than a generic message.
This guide covers how email-delivered fake government app campaigns are structured and how to verify any official app before installation.
How this scam works on email
An email arrives with official agency branding and explains that a new mandatory app must be installed to continue accessing a government service — filing tax returns, receiving benefits, verifying identity, or managing immigration status. The email explains why the app is needed, provides screenshots or a brief walkthrough, and includes a download button or link.
The link bypasses official app stores and leads directly to an APK download (for Android) or an unofficial listing for iOS devices. The app closely mimics the genuine government app in appearance and basic function while silently accessing stored credentials, SMS codes for two-factor authentication, and banking app data in the background.
Some campaigns add urgency by stating that access to the government service will be suspended within a specific number of days if the app is not installed, creating pressure that overrides the caution many people would otherwise apply to any app installation.
Common red flags
- Email asks you to install an app via a link rather than directing you to the official App Store or Google Play listing
- Download link goes to a third-party website or a direct APK file rather than an app store
- App is described as mandatory for a service you already access without it
- Email sender domain does not match the official agency domain
- App requests permissions that do not correspond to its stated government function
How to protect yourself
- Only install government apps from the official Apple App Store or Google Play — search the app name there directly
- Visit the government agency's official website to find their app store link rather than following email links
- Never install an app from a direct APK link received in an email
- If you have installed a suspicious app, remove it immediately and run a security scan
- Change passwords for banking and government portal accounts if you installed an app from an email link
How to report it
- Report the email to your national cybersecurity authority's phishing reporting address
- Forward to [email protected]
- File a complaint with the FTC at reportfraud.ftc.gov or Action Fraud
- Report the malicious app to Google Play or Apple via their official reporting channels if it appeared there
Frequently asked questions
Would a government agency email me a link to install an app?
Genuine government agencies that have official apps direct users to the App Store or Google Play listing on their official website. An email containing a direct download link for an app is not how official app distributions work.
How do I verify whether a government app is official?
Go to the agency's official website, find their app information page, and follow the link from there to the App Store or Google Play. Check the developer name in the store listing matches the government agency.