
ESET researchers uncovered 28 fraudulent Android apps named CallPhantom on Google Play that falsely claim to provide call logs, SMS, and WhatsApp history for any phone number in exchange for payment. These apps, downloaded over 7.3 million times, generate fake data and do not access real user information. Some apps bypass Google Play's billing system, making refunds difficult. Google has removed these apps after being notified. The scam mainly targeted users in India and Asia Pacific, with subscription fees up to $80. Users who paid outside Google Play may struggle to get refunds.