Recovering Funds After a Malicious App Scam

Why this scam is different from a transfer you made yourself

A malicious app scam usually starts with a link to install an app outside official app stores. It is often disguised as a courier tracker, a bank update, or a government form. Once installed, it can read your screen, capture passwords, and even approve transfers on your behalf.

This matters because the transfer may not have been something you knowingly did. It may be an unauthorised transaction carried out through your phone while the app had control, which is treated differently from a transfer you approved yourself.

Because of this distinction, how you describe what happened when you report it can affect what your bank is able to do.

Secure your device and accounts first

Before anything else, put your phone in airplane mode or turn it off to stop the app communicating, then move to a different, trusted device. From there, change your banking, email, and e-wallet passwords immediately.

Do not simply delete the suspicious app and continue using the phone as before. A factory reset is the safer option if you are unsure what else was installed alongside it.

Check for other logged-in devices or new payees in your banking app and remove anything you do not recognise.

Report to your bank and the police

Call your bank as soon as you can, explain that a malicious app controlled your phone, and ask them to freeze the account and review the transfer as potentially unauthorised. This description matters more here than in a standard dispute.

File a police report, either at a station or with the Commercial Crime Investigation Department (CCID). Call the National Scam Response Centre (NSRC) on 997 if the transfer was recent. Keep the app name, the link you clicked, and any messages that led you to install it.

When tracing and a civil claim make sense

Once the receiving account is identified, tracing and freezing the funds through a civil claim may be worth exploring, particularly for a meaningful amount. This works alongside, not instead of, your bank dispute and police report.

Legal help after a scam can explain whether this route fits your situation. A look at whether legal action is worth pursuing sets out what to weigh before you commit any cost.

What to do next

Secure your device and accounts first, then report to your bank and the police without delay. Each step protects what may still be recoverable and strengthens any later claim.

For a broader look at your options, see the recovery options overview. You are not expected to know every technical detail before asking for help.