Last year, Google announced that Play Protect would prompt you to scan unknown Android apps before sideloading. Google is now piloting enhanced financial fraud protection for Play Protect.
Play Protect will “analyze and automatically block the installation of apps that may use sensitive runtime permissions frequently abused for financial fraud when the user attempts to install the app from an Internet-sideloading source (web browsers, messaging apps or file managers).”
This enhancement will inspect the permissions the app declared in real-time…
Google is specifically looking for financial fraud apps that request the RECEIVE_SMS, READ_SMS, BIND_Notifications, and Accessibility permissions. They can be used by fraudsters to intercept one-time SMS or notification-based passwords and spy on screen content.
our new overlords!
and the basis of new antitrust case
note: i think its good to protect people. but this ought to be the job of regulators. instead, we have a monopolistic giant who has become the de facto authority.