Reward App Scams in India: 9 Red Flags to Check Before You Install

Nine warning signs, a five-minute verification routine you can run on any app, and the steps to take if you have already handed one your details.

Rewards is a category with real apps and a great many fake ones, and the fakes are getting better at looking legitimate. The good news is that they fail predictable tests. Here are nine, roughly in order of how damning each one is.

1. It asks for money up front

An "activation fee", a "premium unlock", a "withdrawal processing charge". Real reward apps are paid by advertisers, never by users — the entire model runs the other direction. Any request for payment means the fee is the product. This is the single most reliable signal, and it should end the evaluation immediately.

2. It wants a password, OTP, or your full card details

No legitimate reward requires the password to your game account, your bank, or your email. A game top-up needs your public player ID and nothing more. An OTP request is account theft in progress, every single time, with no exceptions worth entertaining.

3. The earnings claims are arithmetically impossible

"₹1,000 per day from your phone." Work out where it would come from. Advertisers pay a bounded amount per acquired user, so an app promising more than the underlying advertising is worth is either lying or paying early users with later users' money. The economics of reward apps gives you the numbers to sanity-check any claim in about thirty seconds.

4. Earnings depend mainly on recruiting others

Referral bonuses are normal in moderation. But when the main path to earning is bringing in more people, and their earnings depend on bringing in more people again, the structure is a pyramid regardless of what the app calls it. These always collapse, and the people who joined last lose whatever they were owed.

5. There is no working privacy policy or terms

Check the Play listing for policy links and open them. Warning signs: a dead link, a Google Doc, a page copied from another company with the names left in, or a policy that never names the entity operating the app. Google Play requires these, and a developer cutting corners here is cutting them everywhere.

6. There is no way to delete your account

Play requires a deletion route, in-app or via a public web page. If an app has no such route, or it is buried and non-functional, the developer either does not take data obligations seriously or does not intend to give your data back. Ours is here, and you should be able to find any legitimate app's equivalent in under a minute.

7. The permissions do not match the function

A rewards app needs very little. If it asks for SMS access, your contacts, call logs, or accessibility services, ask what any of that has to do with completing offers. SMS access in particular allows reading OTPs. Accessibility services allow observing and controlling what you do on screen. Neither has a legitimate place in this category.

8. The reviews follow a pattern

Look past the star rating at the shape of the reviews:

  • Hundreds of five-star reviews of two or three generic words, posted in bursts on the same days
  • Detailed one-star reviews all describing the same failure — usually a withdrawal that never arrived
  • A rating that is high while the recent reviews are overwhelmingly negative
  • Developer replies that are identical boilerplate on every complaint

Sort by most recent and read the one-star reviews first. That is where the truth lives.

9. The payout threshold keeps moving

The classic long con: earning is easy and fast right up to the threshold, and then it slows to nothing. Or the minimum rises. Or withdrawals stay "processing" indefinitely. The app was never going to pay — the point was your attention and ad impressions along the way. Recent reviews are where this shows up first, because it is precisely what users who got that far will be writing about.

The five-minute check

Before installing anything in this category:

  1. Read the recent one-star reviews. Sort by newest. Look for repeated, specific payout complaints.
  2. Open the privacy policy and terms. Do they load, are they specific, do they name an actual operator?
  3. Find the deletion route. If you cannot, that is your answer.
  4. Check the permissions on the Play listing under "App info". Anything involving SMS, contacts or accessibility is disqualifying.
  5. Sanity-check the earnings claim against what advertisers plausibly pay.
  6. Search the app's name with "not paying" and read what comes back.

Run this on every rewards app, ours included — we set out how we do on it, including the parts that are not flattering.

If you have already installed one

Act in this order:

  1. If you shared a password, change it now — on that account and anywhere you reused it. Turn on two-factor authentication.
  2. If you gave an OTP, contact the relevant provider or bank immediately and tell them the code was given to a third party.
  3. If you paid a fee, contact your bank or UPI provider about a chargeback and keep every screenshot.
  4. Revoke permissions, then uninstall. Revoking first matters, because some apps act on the way out.
  5. Request deletion of your data, if any route exists.
  6. Report it on Google Play — "Flag as inappropriate" on the listing. It is slow, but it is what gets these removed eventually.

Losing a bit of time to a bad app is recoverable. Losing an account, or money, is a different order of problem — which is why the five minutes of checking beforehand is worth it every time.