Fake Chrome Rode a Sponsored Slot Past Play Store Review to 100,000 Downloads

Fake Chrome Rode a Sponsored Slot Past Play Store Review to 100,000 Downloads

A counterfeit Chrome with 100,000+ installs

On October 14, 2026, an app posing as Google Chrome was found openly available on the Play Store with a download count listed as 100,000+. It carried Chrome's official icon, name, screenshots, and even the description copied from Google's own listing. The one obvious giveaway sat underneath the title: the publisher was listed as Hizbartech, not Google LLC. A user in the r/browsers subreddit spotted it while searching for "Chrome," where the imitation appeared above the genuine browser as a sponsored result. PiunikaWeb reported it first, and Android Authority, PhoneArena, Beebom, AndroidHeadlines, and MakeUseOf followed.

Ball Bounce first, Chrome later

According to PiunikaWeb, the app launched on August 22, 2026 as a casual game called Ball Bounce, and it still carried the package identifier com.ballbounce.Hizbartech. On September 30, the developer renamed it and swapped in Chrome's artwork. Android Authority uses those same two dates to mark the original listing and the rebrand. The bait-and-switch let the app accumulate downloads under an ordinary identity and then walk into Chrome's search results holding a ready-made install count instead of starting from zero.

It opened to AI avatars, not a browser

Redditors who installed the roughly 42MB, rated 3+, still "in development" app described something far from a browser. After setup, it prompted a string of requests — including picking an AI avatar — then dropped users into a contact-style interface full of virtual characters and canned responses, with ads hammering the screen. One tester chatted with it and got random replies. No evidence has surfaced that it stole passwords or installed malware, so it is not confirmed as a trojan; but its ability to pull fresh code from a remote server is exactly the kind of opening security researchers worry about.

Money bought it the top slot

What made the case blow up was placement. The fake listing reached the top through paid advertising. PiunikaWeb could not reproduce the sponsored result by searching for "Chrome" alone, but typing the developer name "Hizbartech" surfaced the listing immediately. Play's developer policies prohibit apps that impersonate others, which turned scrutiny toward two questions at once: why review let the rename and icon swap through, and why the ad system handed users the counterfeit.

Google pulled it, but review questions stay

According to multiple outlets, Google has removed the fake Chrome from the store. As of publication, Google had not publicly explained how the app cleared its checks after changing name, icon, and description. The numbers make an uncomfortable contrast: the delisted imitation showed "100,000+" downloads, while the real Chrome for Android counts downloads in the billions and holds a 4.2-star rating from roughly 47 million reviews.

The publisher name is the tell

For ordinary users, neither the icon nor the download count proves anything. The reliable check is the developer signature: real Chrome for Android is published by Google LLC and uses the package name com.android.chrome. If a page claiming to be Chrome is credited to an unfamiliar company, treat it as suspect. Security writers also stress that a "sponsored" tag does not make an app safe, and a high download count does not make it genuine.

If you installed it, remove it and scan

Anyone who installed the imposter should uninstall it and revisit the permissions they granted during setup. Check your phone's app list under Settings for unfamiliar entries, or long-press the Chrome icon and open App info to jump to its store page and verify the publisher. Then open Play Store, tap the profile icon, and run a Play Protect scan, which catches apps already flagged as harmful.

Not the first impersonator to slip through

Incidents like this keep recurring. Search ranking, ad placement, icons, and download figures are all surfaces that can be faked, and platform review struggles with post-publish changes like a rename or a new icon. For users, that pushes the line of defense down to checking the developer by hand. For the platform, stopping an impersonator after it changes identity remains the open problem.