Fake WhatsApp clone outranks the real app as a sponsored Play Store result

A counterfeit WhatsApp clone surfaced at the top of Google's Play Store this week, occupying a "sponsored" search position above the genuine app. According to The Verge, a Reddit user spotted the impostor, and Android Authority reported earlier that it had already accumulated more than 500,000 downloads while its listing remained live at the time of writing.

A paid slot above the genuine app

The clone was published by a developer going by "Agment Assets sallu", whose Play Store profile lists no other apps, The Verge reports. The listing itself copies the real WhatsApp Messenger closely: same icon, same screenshots and the same descriptive text. What it cannot copy are the genuine app's credentials, which include more than 10 billion downloads, an Editor's Choice badge and over 246 million user reviews — figures no week-old impostor can match.

That contrast is what makes the sponsored placement notable. Google's store search normally rewards the metrics the fake app lacks, but a paid slot apparently let the clone leapfrog one of the most-downloaded applications in Android's history.

Early Access as a review shield

Android Authority points out that the impostor may be exploiting Google Play's Early Access program, which allows pre-release apps to keep public user reviews switched off. Open reviews are one of the fastest ways for early downloaders to flag a scam and warn others away, so the mechanism that exists to protect unfinished apps appears to have doubled as cover for this one.

The second clone in a week

The WhatsApp knockoff is not an isolated case. The Verge notes that a fake version of Chrome was spotted on the Play Store earlier the same week, suggesting a small wave of copycats testing whether Google's search, ads and review pipelines can be gamed in the same way. Google did not immediately respond to a request for comment, The Verge reports, and at the time of publication the WhatsApp listing was still available.

Why it matters

This incident exposes a gap between two systems that users assume are aligned: app discovery and app security. Sponsored placement means advertising spend, not authenticity, determines which listing a searcher sees first. When the paid result is a pixel-level copy of a household-name app, the usual sanity checks — look at the icon, skim the screenshots, read the description — fail completely, because the clone duplicates all of them.

The signals that do survive are the ones a scammer cannot fabricate overnight: download counts, review volume, verified badges and the publisher's track record. In this case those signals were visible but positioned below the fake, relying on users to scroll past the top result and compare numbers themselves.

There is also an unanswered question about intent. Neither report specifies what the clone does once installed, which is exactly what makes impostor messaging apps risky: the category handles private conversations, contacts and verification codes. Even if a copycat is merely adware, users who log in have handed credentials to an unknown party.

For Google, the pattern — a Chrome fake one week, a WhatsApp fake the next, both surfacing through the store's own discovery surfaces — puts pressure on the ad-review process and on programs like Early Access that can suppress the community warnings meant to catch these listings. Until those pipelines tighten, the practical advice for users is blunt: before installing a well-known app, check whether the download count and review history are plausibly large, and treat a sponsored label as a reason to look twice rather than a mark of legitimacy.