Real or Fake? A Checklist Built From 115 Apps

Everyone reviewing one of these apps wants a quick way to size it up before installing anything. This checklist is not theory: it is the exact set of checks we run on every app in our directory, with the actual numbers from our September 2026 pass across 115 apps.

Check the domain, not the app icon

An app icon and splash screen can be copied in minutes. A domain's registration history is harder to fake. Look up the domain (not the app name) at a WHOIS or RDAP lookup tool and note the creation date and registrar.

Across our 115-app sample, the median domain age was 82 days. Half the apps we reviewed are running on a domain younger than three months old. That is not automatically fraud, but it does mean the operator has no track record on that particular address.

A very young domain is a signal, not a bonus

Eight of the 115 domains we checked were under 30 days old on our check date, including one registered only six days earlier. A domain that young cannot have built any real history of paying anyone anything: any "thousands of happy users" claim on a six-day-old site is simply not possible to have accumulated.

Domain age on 26 Sep 2026	Number of apps
Under 30 days	8
30-89 days	48
90-179 days	25
180 days or older	24

Search Google Play before you trust an APK button

Zero of the 115 apps we checked were listed on Google Play as of 26 September 2026. That is worth doing yourself, every time, before you download anything from outside the store: open Play, search the exact app name, and see what comes back. Our legal guide explains why none of these apps can be on Play in the first place.

Red flags we saw repeated across the sample

• Live "someone just withdrew" tickers. Several homepages scroll a feed of masked usernames "successfully withdrawing" specific rupee amounts. There is no way for an outside visitor to verify a single one of these claims.
• Bonus numbers that escalate fast. Of the 115 apps, 37 displayed a specific bonus or prize figure on the homepage, several reaching into the tens of millions of rupees. A number that large, offered for a small action like an install, is designed to catch attention rather than describe a typical payout.
• An invitation code box on the registration screen. Fifteen of the 115 homepages we could read explicitly mention an invitation code at sign-up. We cover why that matters in our invitation code guide.
• Sites that block or fail on the day you check them. Twelve of the 115 sites returned an error or access-blocked response instead of a normal page when we visited on our check date; a working link today is no promise it stays that way.

What normal app marketing looks like, for comparison

A mainstream finance or utility app on Google Play typically shows a stable install count, a public developer name tied to a company, dated version history, and user reviews you can read yourself, good and bad. None of the 115 apps in our sample offer any of that, because none of them are on Play at all, and there is no independent install count or public review history to check against their own claims.

Things this checklist cannot tell you

We do not create accounts or deposit money on any of these apps, so this checklist cannot tell you whether a specific app will actually pay out on a specific day. It can only tell you how much independently checkable information exists before you would need to hand over a mobile wallet payment. For most of these 115 apps, that amount is small. See our methodology page for the full detail of what we do and don't do before publishing a review.

Reading a domain lookup result for the first time

If you've never run an RDAP or WHOIS lookup before, the result can look like a wall of technical fields. Three of them matter for this checklist: the creation date (when the domain first went live, anywhere, under any owner), the registrar (who sold the registration), and the expiry date (when it's due to lapse if not renewed). A domain due to expire within a few months of its creation date, rather than the usual one- or two-year block, can be another small sign that the registrant is not planning for a long run.

Check who else the domain points to

Two different app names can quietly share one underlying website. In our September 2026 sample, two of the 115 apps we reviewed, listed under different brand names, both resolved to the exact same domain. If a "new" app you're looking at shares its registration page, its icon path, or even just its raw domain with an app you've already seen elsewhere, that's worth noticing before you assume it's an independent product.

Look at the registrar, not just the age

Across our 115-app sample, a handful of budget-friendly registrars accounted for most of the domains: roughly 43% used a single low-cost registrar, with a smaller cluster on two or three others. A cheap registrar is not itself a red flag, since plenty of ordinary small sites use the same ones, but it does mean these operators are optimising for how fast and cheaply a new domain can go live, which lines up with how quickly some of these sites appear and disappear.

Put it together

Run the domain age check, the Play Store search, and a look for an invitation code box before anything else. If two or three of the flags above line up on the same app, treat that as a reason to slow down, not a reason to move faster because "everyone else is signing up."