PROJECT: THE APPS ON YOUR PHONE

12 minutes ago

7 min read

PLEASE SHARE THIS PUBLIC DOCUMENT

A POTENTIAL GATEWAY TO CYBERCRIME

Smartphones contain extensive amounts of personal and financial information, including banking applications,

private messages, photographs, contact lists, passwords, location data and access to email accounts.

Applications make everyday activities more convenient, but downloading software without checking its source,

permissions and security can expose users to cybercrime, privacy violations and financial losses.

The risk is not limited to applications that are openly malicious. Legitimate applications may collect more information

than users expect, while counterfeit applications can imitate trusted services to deceive users into disclosing

sensitive information or installing harmful software. Criminals may also exploit applications, advertising links

and unofficial download websites to distribute malware.

For South Africans who rely on their phones for banking, business transactions, communication and access to personal services, application security should form part of everyday crime prevention.

1. APPLICATIONS THAT CAN EXPOSE USERS TO CRIMINAL ACTIVITY:

Certain categories of applications deserve particular scrutiny:

UNOFFICIAL BANKING, INVESTMENT AND CRYPTOCURRENCY APPLICATIONS:
- Fraudulent applications may imitate financial institutions or trading platforms to capture login credentials, obtain deposits or redirect payments.
- Users should verify the service through the institution's official website or independently confirmed contact details.
APPLICATIONS DOWNLOADED FROM UNOFFICIAL WEBSITES:
- Modified installation files may contain malware, spyware or other unwanted software.
- Avoid downloading applications from unfamiliar websites or links received through unsolicited messages.
UNVERIFIED PHONE-CLEANING AND SECURITY APPLICATIONS:
- Applications advertised as essential cleaners, battery optimisers or virus removers may request excessive permissions, display deceptive advertisements or encourage unnecessary payments.
- Their claims should be independently verified.
SPYWARE AND COVERT-MONITORING APPLICATIONS:
- Some software can enable unauthorised monitoring of messages, location, photographs or online activity.
- Monitoring another person's device without lawful authority or consent may create serious legal consequences.
UNOFFICIAL VPN AND PRIVACY APPLICATIONS:
- A virtual private network does not automatically guarantee anonymity or security.
- An untrustworthy provider may collect browsing information or expose users to privacy risks.
APPLICATIONS PROMISING FREE PREMIUM SERVICES OR PIRATED CONTENT:
- Unofficial versions of paid applications, games and streaming services can expose users to malicious downloads, fraudulent payment requests and compromised accounts.
APPLICATIONS REQUESTING UNNECESSARY PERMISSIONS:
- A calculator or simple utility generally has no obvious need for continuous access to contacts, microphone recordings or precise location data.
- Unexpected permission requests warrant investigation.

These categories are risk indicators, not proof that every application within them is malicious. Each application must be assessed on its own evidence.

2. HOW CRIMINALS EXPLOIT MOBILE APPLICATIONS:

An insecure or malicious application can become a route into a person's broader digital life. Depending on the software and permissions involved, criminals may seek to steal passwords, capture one-time authentication codes, access private information, monitor activity or redirect users to fraudulent websites.
Compromised email accounts can be particularly damaging because email is often used to reset passwords for banking, social media and other services. Criminals who obtain sufficient personal information may also impersonate victims, target their contacts or use their identities in further fraud schemes.
Applications can also create physical-security risks. Unnecessary location permissions, publicly shared travel details and access to photographs containing location metadata may reveal a person's movements, routines or whereabouts. This information can be exploited for stalking, harassment, targeted scams or other criminal activity.
The presence of a suspicious application does not automatically establish that a device has been compromised. However, unexpected account activity, unexplained data consumption, intrusive advertisements or unusual device behaviour should prompt a security review.

3. WARNING SIGNS TO INVESTIGATE:

Users should exercise caution when an application:

Is promoted through an unsolicited message, pop-up advertisement or unfamiliar download website.
Has no identifiable developer, credible support information or clear privacy policy.
Requests permissions that are unrelated to its advertised function.
Requires users to disable security protections or install additional software from an unknown source.
Promises guaranteed investment returns, effortless income or benefits that appear unrealistic.
Requests banking passwords, card details, PINs or authentication codes without a verified and legitimate reason.
Displays persistent pop-ups, redirects users to unfamiliar websites or installs other applications without clear authorisation.

Reviews and download numbers can help inform a decision, but they are not conclusive evidence of safety. Reviews can be manipulated, and a previously legitimate application may change ownership, functionality or data practices.

4. PRACTICAL STEPS TO PROTECT YOUR PHONE:

BEFORE DOWNLOADING AN APPLICATION:
- Use the official Apple App Store or Google Play Store wherever possible, while recognising that official stores cannot guarantee that every application is safe.
- Verify the developer and confirm that the application is linked from the organisation's genuine website when appropriate.
- Read the privacy policy, recent reviews, permissions and available information about the data collected.
- Reject unnecessary permissions and avoid granting unrestricted access to sensitive features without a clear reason.
- Keep your phone's operating system and applications updated, and use a strong screen lock.
- Enable multifactor authentication on important accounts and never disclose banking PINs or one-time authentication codes to callers or strangers.
- Remove applications that are no longer needed, particularly those whose source or purpose you cannot verify.
IF YOU SUSPECT AN APPLICATION IS MALICIOUS:
- Stop entering passwords or financial information through the application.
- From a separate, trusted device, contact your bank if financial details or banking access may have been exposed.
- Change affected passwords, secure your email account and revoke unfamiliar account sessions where possible.
- Review application permissions, device administrator access and accessibility permissions for unfamiliar or suspicious entries.
- Preserve relevant evidence, including screenshots, messages, transaction records, application details and download links.
- Seek assistance from a reputable technical-security professional if you suspect spyware or a deeper compromise. If covert monitoring may involve an abusive or threatening individual, consider your personal safety before changing settings or removing the application.

A factory reset may be necessary in some cases, but it should not be treated as the automatic first response. The appropriate action depends on the suspected threat and the evidence available.

5. SOUTH AFRICAN REPORTING AND LEGAL CONSIDERATIONS:

Victims of suspected application-related fraud should notify their bank promptly where financial accounts may be affected, retain available evidence and report the matter to the South African Police Service (SAPS). Suspected cybercrime should be reported through appropriate official channels, and victims should avoid paying individuals who promise guaranteed recovery of stolen funds.
South Africa's Cybercrimes Act 19 of 2020 addresses specified cyber-related offences, including unlawful access to computer systems and certain unlawful acts involving data and computer programs. The Electronic Communications and Transactions Act 25 of 2002 and the Protection of Personal Information Act 4 of 2013 may also be relevant, depending on the conduct and circumstances.
Downloading an application or possessing suspicious software does not, by itself, establish criminal liability. Legal consequences depend on the conduct, the applicable statutory provisions and the evidence. Equally, a person who knowingly participates in fraud, unlawful access or the distribution of malicious software may face criminal investigation and prosecution.

PUBLIC ACTION CHECKLIST:

Before downloading an application, ask:

Can I verify the developer and source?
Does the application genuinely need the permissions it requests?
Is its privacy policy clear about the information collected and shared?
Am I being pressured to download it, pay money or disclose confidential information?
Do I know how to secure my accounts if something goes wrong?

If an application appears suspicious, do not forward it to others as a warning without checking the facts. Preserve the relevant information and report credible concerns through appropriate channels.

Mobile application security is an essential part of personal, financial and household security.

A single unsafe download can create opportunities for information theft, account compromise, financial fraud

and unlawful monitoring, although the risks vary according to the application and the circumstances.

The public should make informed downloading decisions, limit unnecessary permissions, maintain updated devices

and respond promptly to suspected compromise. Prevention is more effective when based on verifiable evidence

rather than sensational lists or unsupported claims about particular applications.

SSS encourages the public to treat digital security as part of everyday crime prevention

and to report suspected cybercrime through appropriate official channels.

RELEVANT SSS PROJECTS:

Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Channel.

This channel is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.

How to Join the WhatsApp Channel:

1. Make sure you have the latest version of WhatsApp on your device.

2. Click on the link below to join the Mike Bolhuis Daily Projects WhatsApp Channel:

- https://whatsapp.com/channel/0029VarjftF8PgsI4pODE929

3. Follow the prompts to join the channel.

4. Make sure you click on "Follow", then click on the "bell"-icon (🔔)

CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.

ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.

Regards,

Mike Bolhuis

Specialist Investigators into

Serious Violent, Serious Economic Crimes & Serious Cybercrimes

PSIRA Reg. 1590364/421949

Mobile: +27 82 447 6116

E-mail: mike@mikebolhuis.co.za

Fax: 086 585 4924

Follow us on Facebook to view our projects -

https://www.facebook.com/MikeBolhuisOfficial

EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.

STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.

POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv

SSS TASK TEAM:

https://mikebh.link/2fkmx6

Our mailing address is:

Mike Bolhuis Specialised Security Services

PO Box 15075 Lynn East

Pretoria, Gauteng 0039

South Africa

Add us to your address book

THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.