Stop interaction
Do not enter more credentials, approve payments or follow in-app support instructions. Disconnect risky sessions where safe.
This page is a decision worksheet built around a specific search task. It separates observable records, first-party wording and unresolved claims so the conclusion can be checked again after a material change.
Preserve identifiers
Record app name, publisher, package ID, version, store or download URL, installation time and screenshots.
Review permissions
Check accessibility, device administrator, notification, SMS, contacts, files, VPN and profile access, then revoke unexplained privileges.
Secure important accounts
From a trusted device, change reused passwords, review email and financial sessions and enable strong multi-factor authentication.
Report money or identity loss
Contact the financial institution promptly and use official Australian scam or cybercrime reporting channels.
Do not pay a cleaner introduced by the same scam
Recovery services promising guaranteed results for crypto, gift cards or remote access can create a second incident.
Questions this page resolves
Should I uninstall immediately?
Preserve basic evidence first where safe, then follow trusted device-security guidance.
What if I entered a password?
Change it from a trusted device and review every account where it was reused.
What if the app had accessibility access?
Revoke it promptly and seek trusted security help because that permission can control other apps.