Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Apple

Apple's $64 Billion-a-Year App Store Isn't Catching the Most Egregious Scams (theverge.com) 54

A one-man Bunco Squad is poking holes in Apple's App Store image. From a report: Recently, I reached out to the most profitable company in the world to ask a series of basic questions. I wanted to understand: how is a single man making the entire Apple App Store review team look silly? Particularly now that Apple's in the fight of its life, both in the courts and in Congress later today, to prove its App Store is a well-run system that keeps users safe instead of a monopoly that needs to be broken up. That man's name is Kosta Eleftheriou, and over the past few months, he's made a convincing case that Apple is either uninterested or incompetent at stopping multimillion-dollar scams in its own App Store.

He's repeatedly found scam apps that prey on ordinary iPhone and iPad owners by luring them into a "free trial" of an app with seemingly thousands of fake 5-star reviews, only to charge them outrageous sums of money for a recurring subscription that many don't understand how to cancel. "It's a situation that most communities are blind to because of how Apple is essentially brainwashing people into believing the App Store is a trusted place," he tells The Verge. There's a lot to unpack there: fake free trials, fake reviews, subscription awareness. We could write an entire story about each. Today, I'd like to focus on how one guy could find what Apple's $64-billion-a-year App Store apparently cannot, because the answer is remarkable.

This discussion has been archived. No new comments can be posted.

Apple's $64 Billion-a-Year App Store Isn't Catching the Most Egregious Scams

Comments Filter:
  • In the App Store, doubly so.
    • Perfect knowable security is an illusion. But a chain link fence still averts most easy or casual intrusion. It also serves as white line on the road to tell people this is a boundary and thus redirectss the clueless or fools also.

      Just because security isn't perfect doesen't lessen how much it improves things.

      Should we just get rid of all security and passwords because none of it is perfect? duh.

      I love the apple ecosystem precisely because by paying a bit more I spend a lot less on fretting over security.

  • by aardvarkjoe ( 156801 ) on Wednesday April 21, 2021 @10:59AM (#61297282)

    Today, I'd like to focus on how one guy could find what Apple's $64-billion-a-year App Store apparently cannot, because the answer is remarkable.

    Spoiler alert: it's because they get a 30% cut of money from fraudulent apps, so of course they aren't pro-active about removing them.

    It's only remarkable to people who actually believe Apple's claims about how their walled garden is "safe."

    • by fermion ( 181285 )
      In the real world there is something called due diligence, and created processes to minimize risk. Such processes are often not effective against a truly motivated agent, and require individual intervention. For instance if you buy a 30 minute safe, you better check it every 30 minutes at least if there are motivated people who wish to break in.

      Likewise, you canâ(TM)t just click every link that claims to be from your bank. Your bank does its best to protect your money, it is legally obligated to, but

      • Likewise, you canâ(TM)t just click every link that claims to be from your bank. Your bank does its best to protect your money, it is legally obligated to, but canâ(TM)t do so if the client is careless.

        I have seen and left reviews on many suspicious apps. It is up to the user to not load apps that promise free movies and free games.

        Sure, but do banks make bold claims [apple.com] such as

        "The App Store is a safe and trusted place for customers to discover apps"

        or how about [apple.com]

        "For over a decade, the App Store has proved to be a safe and trusted place to discover and download apps... apps we offer are held to the highest standards for privacy, security, and content.

        Privacy and security. Built into everything we do.

        Security for every app. At every level."

        Apple goes on and on about security, trust, safety,... ad nauseam

        100% of apps are automatically scre

        • by Anonymous Coward

          Feels like two conversations.

          Emphasizers saying "they're selling an illusion and the masses are drinking it up and even parroting the claims"

          Apologists saying "it's not 100% perfect nothing is 100% perfect this article is silly"

          Since they aren't the same point, they are not mutually exclusive. Neither of you is wrong, there's just one of you off topic. Moving the conversation posts, probably not intentionally.

        • It IS "safe and trusted", it's just that the "safe" part is barely functional and the "trust" part is unwarranted.

          So yeah, even though it's a minefield it's still trusted. (Not by me, but you get my drift.)

    • by sound+vision ( 884283 ) on Wednesday April 21, 2021 @12:14PM (#61297530) Journal

      People who believe that have already spent thousands on their products and furthermore have an emotional investment. They'll find some reason to disregard or quickly forget this news, rather than risk their peace of mind.

  • Not really a scam... (Score:5, Informative)

    by cmseagle ( 1195671 ) on Wednesday April 21, 2021 @11:05AM (#61297296)

    "Scam" doesn't seem like the right term here. If the user selects the "3 day free trial, then $9.99/week" option... they're then billed $9.99 a week after their 3 day free trial. The "then $9.99/week" bit isn't even buried in fine print. It's right up front. At least the fact that it's going through the App Store subscription model means that it's dead simple [apple.com] to cancel.

    • by Dru Nemeton ( 4964417 ) on Wednesday April 21, 2021 @11:35AM (#61297384)
      Yeah. Another click-bait article from both /. and The Verge. Fake reviews are a thing that all online stores, review sites, etc., combat on a daily basis. Yet TFA says nothing about either this "researcher," or The Verge, actually reporting these "fake review" as such to Apple.

      As to the "scam" apps, like you pointed out, their example is a horrible one as the terms of service are right up front and clearly inform the user of what they're signing up for when they agree to the terms.

      Apple has a history of looking at apps that are reported by users as "scams" and will take appropriate action when warranted. (See: https://en.wikipedia.org/wiki/... [wikipedia.org])
      • by Whibla ( 210729 )

        Yeah. Another click-bait article from both /. and The Verge. Fake reviews are a thing that all online stores, review sites, etc., combat on a daily basis. Yet TFA says nothing about either this "researcher," or The Verge, actually reporting these "fake review" as such to Apple.

        Wow!

        From the article: "Eleftheriou tells me that Apple has removed over 100 apps due to his reports";
        "... that app that John Gruber helped draw attention to [It currently has a 4.1 rating, despite countless negative reviews] in 2019 ... It’s still on the App Store. Never got removed.";
        "On February 8th, we [The Verge] brought a bunch of these scams to Apple’s attention ... Apple didn’t remove that app for two whole months, and won’t tell us the reasons for the delay."

        So, in fact the r

        • After actually reading the article though one might be moved to ask the question: What does Apple feel warrants the appropriate action, because it doesn't seem to match my expectations.

          W-w-what the?

          Um, excuse me ....

          Let me tell you something — you’ll be told what your expectations are, and you’ll be told when they’ve been met, capiche?

          If we wanted you to think ... well .. . we never want you to think, so you don’t need to worry about that.

          Do you want this identity or not? I m

      • Apple has a history of looking at apps that are reported by users as "scams" and will take appropriate action when warranted.

        It’s no use, some people just don’t know how to think different. They deserve our pity, not our efforts to educate them.

    • by ochinko ( 19311 )

      Did you read the article?

      First the user is tricked into believing that the Safari ad pop-up came from Apple themselves, then they are led into a store full of fake five star ratings of an app that fails to deliver.

      Do you think Apple is neither capable, nor competent enough to catch those two steps?

      • I dunno, it is Apple we are talking about. Whose design and marketing team prolly have a 1000x budget over the engineering teams.
      • Do you think Apple is neither capable, nor competent enough to catch those two steps?

        Apple loves us, and, like good parents, they’re practicing tough love and preparing us for the “real world”. Only this way, they do it in a controlled environment where the money goes to them instead of some terrorist organization or worse, Google.

        In turn, they use that money to develop magical things that improve our lives, such as monitor stands and charger-less phones.

        Of course, some are not enlighten

    • by Ichijo ( 607641 )

      It appears that these apps prey on people who don't know how to cancel through the app store by giving them a useless customer service number to call if they want to cancel.

      And then you have all the fake 5-star reviews, misleading people into thinking the charge, no matter what it is, is reasonable and appropriate for the app. If your eyesight is failing, just make sure the app has 5 stars and you're good, right?

      So these scams don't target people like you and me, they target people like grandma who are more

      • Fair enough. I think I would still describe these apps as "predatory" rather than "scammy". They're delivering something with clearly stated terms... but those terms are scummy and take advantage of those who are less informed. Not sure what Apple can do to totally protect users from that. Some are going to fall victim even if the apps have terrible ratings. I guess just take down the apps that have the highest rate of refund requests? That opens a whole other can of worms, though, where Apple has to sta

    • by e3m4n ( 947977 )
      its not that simple. Every time I have had to cancel a subscription I have had to re-google how to do so. Its not intuitive and an in-app canceling a renewal could easily be a requirement of membership in the app store to begin with. Even one app I used from time to time 'Carista' that comes with Bluetooth ODB2 interface module, had a preivous model of annual subscription for $50/yr or a 1-time $10 purchase for a 1-week access to the advanced tools. Aside from making dealership tweaks to settings like how
    • "Scam" doesn't seem like the right term here. If the user selects the "3 day free trial, then $9.99/week" option... they're then billed $9.99 a week after their 3 day free trial. The "then $9.99/week" bit isn't even buried in fine print. It's right up front. At least the fact that it's going through the App Store subscription model means that it's dead simple [apple.com] to cancel.

      Yeah, I’ve seen some pretty misleading ones. In almost no cases is such a charge willful and fully understood, and only r

    • "Scam" doesn't seem like the right term here. If the user selects the "3 day free trial, then $9.99/week" option... they're then billed $9.99 a week after their 3 day free trial. The "then $9.99/week" bit isn't even buried in fine print. It's right up front. At least the fact that it's going through the App Store subscription model means that it's dead simple [apple.com] to cancel.

      Are the million fake reviews and fake contact info similarly legitimate?

    • "Scam" doesn't seem like the right term here. If the user selects the "3 day free trial, then $9.99/week" option... they're then billed $9.99 a week after their 3 day free trial. The "then $9.99/week" bit isn't even buried in fine print. It's right up front. At least the fact that it's going through the App Store subscription model means that it's dead simple [apple.com] to cancel.

      Would any user actually accept those terms if they fully understood them?

      If the answer is overwhelmingly "no" then they're scams.

      Since the Apple is managing the subscription it seems like it should be simple for Apple to fix this problem as well. When purchasing the subscription based app the iPhone should show the user something like:
      The free trial is 3 days
      As of April 24th, 2021 you will be charged $9.99 / week
      This works out to approximately $43.29 / month
      And $519.48 / year

      How many of those apps would ge

  • by kbg ( 241421 ) on Wednesday April 21, 2021 @11:18AM (#61297320)

    Well it's obvious Apple has no interest in removing these scam apps, since they make a profit from them. As demonstrated in the article you could remove 99% of all of these scam apps by paying just a single intern to go through the list every day and block the scam apps. As usual they simply just don't care.

  • by mr.dreadful ( 758768 ) on Wednesday April 21, 2021 @11:24AM (#61297342)
    "Apple is in the fight of its life"? Not even remotely close. Apple has a net worth of 65 billion and has a market value of over 2 trillion. Those of use who remember Apple in the 90's have a different perspective.
    • You see, web publications are in the fight of their life to stay afloat in a world where no one wants to waste time on their low-effort content and companies have figured out that no one really clicks on web ads on these sites. Hence the need to spice up articles and hope you can get someone to click on it and drive the metrics before your website goes under or gets bought up by some conglomerate whose first act of business is going to be laying off half the staff. I'm glad the blink tag was deprecated, bec
  • by nitehawk214 ( 222219 ) on Wednesday April 21, 2021 @11:27AM (#61297354)

    The wall is 2 feet tall.

  • Its hard (Score:4, Interesting)

    by Midnight Thunder ( 17205 ) on Wednesday April 21, 2021 @11:30AM (#61297370) Homepage Journal

    I'd like to believe that Apple is trying, but it is likely a game of cat and mouse. Scammers work hard to stay ahead of the approval process and are probably aware of where the automated checks fail. At the same time Apple probably is still catching more problematic apps than Google does on the Play Store.

    On the other hand, the biggest scam still feels like apps pushing for subscriptions, without necessarily doing the work to provide continuing value.

    • Re: Its hard (Score:5, Insightful)

      by reanjr ( 588767 ) on Wednesday April 21, 2021 @11:42AM (#61297412) Homepage

      You're ignoring the fact that one guy is finding a bunch of these. It's not as hard as Apple wants you to think.

      • Honestly, Apple should just hire the guy since he's apparently pretty good at this. Maybe just give him a small bounty for reporting apps to someone at Apple who will review them.
    • Most app store apps have hit peak maturity but without any ongoing maintenance they break or get obsoleted by IOS updates.

      It seems inevitable that the "$1 apps" bonanza would never last and that subscriptions would end up being the result.

      I just can't believe the number of apps that want $20/year.

    • by Pimpy ( 143938 )

      I'd also like to believe that Apple is trying, but there's no evidence to back that up. I occasionally run into apps that have egregious GDPR violations (e.g. forced consent, data transfers to third countries without an established mechanism for safeguarding the rights of the data subject, empty privacy policies, etc.), but which were published and made available to the EU region anyways. Whatever kind of review these apps are getting is cursory at best - most of this could even be caught just by static che

    • by tlhIngan ( 30335 )

      It's also down to judgement.

      Apple's reviews catch technically malfunctioning apps. Apps that aren't doing what they need to do.

      Apple obviously doesn't want to police app models - after all, the last thing they want is a developer to come up with a clever app that needs a subscription but to deny them the ability to do it because it's "scammy". So Apple doesn't really want ot touch apps that might rely on an oddball business model. They can clamp down on some business models like using invasive ad tracking a

      • Lmfao you think they're reticent about clamping down in apps for any reason? Google all the "we don't know why we're blocked but we are" complaints
  • by stevez67 ( 2374822 ) on Wednesday April 21, 2021 @11:37AM (#61297394)

    Lots of "free" apps are trial period followed by automatic subscription renewal unless canceled. That's not a scam, it's failure on the part of the customer to actually read the terms of what they're downloading. Personally, I find the subscription cost of a lot of main-line software apps (Adobe, Micro$oft, etc.) to be exorbitant and they all auto-renew unless canceled, but they're not scams either.

  • by chispito ( 1870390 ) on Wednesday April 21, 2021 @11:58AM (#61297476)
    Unless you have a list of rejected apps, I don't believe you can say Apple is not catching the most egregious offenders. There is a story here but the headline is a reach.
    • Apple should not be touting the App Store as a safe and secure place to download software if these scams are prevalent in the main store. It doesn't matter how many they have rejected it matter if the amount they let in is more than 0, which it most certainly is.
    • There is a story here but the headline is a reach.

      Yes, but it's good clickbait.

  • by radarskiy ( 2874255 ) on Wednesday April 21, 2021 @12:20PM (#61297562)

    Apple pays a reputational cost if they accidentally remove a marginally anti-social app. If they let an obvious scam continue, it doesn't really hurt them much.

    What's the rational choice, the high cost or the low cost?

  • People should ditch Apple, this never happens on Android.
  • I don't link the App Store to a credit card. I only load money into it with store bought cash cards. The worst they can do is zero out whatever my current balance is (usually not much).

  • keeping malicious videos deceiving users online because they get a lot of views.
    Just like Apple, their moderation is broken and they don't respond to users reporting 'inappropriate' content.

  • If you think about it, scam app store based subscriptions are like robodialers. Everybody hates robodialers but the phone company doesn't care because they are making money off every call. Apple is too. They will probably eventually put a stop to it or find a way to do so on the grounds that it tarnishes the company image. The phone system is so fragmented and balkanized that no one company can pull the plug on scammers. So, if you think opening up iOS to competing app stores is a good idea, this might

  • I mean, compared to that, everything else is small change.

Two can Live as Cheaply as One for Half as Long. -- Howard Kandel

Working...