- Google banned more than 1,75 million malicious apps before they reached Google Play.
- More than 80.000 developer accounts linked to fraud, malware, and data abuse were closed.
- Play Protect analyzes 350.000 billion apps daily and has identified 27 million external threats.
- Artificial intelligence and controls on privacy and fake reviews are key to securing Android.
Google has put concrete figures to the cleanup efforts on its official Android store . According to its 2025 security report, the company blocked the publication of 1,75 million apps that violated Google Play's policies, thus preventing a large volume of potentially dangerous software from reaching users' mobile devices.
The report, which details the state of security within the Android app ecosystem , also underscores the role of artificial intelligence in detecting increasingly sophisticated fraud, malware, and privacy abuses . The firm emphasizes that its priority is maintaining Google Play and Android as reliable environments for downloading and using apps , in a context of growing threats globally, including in Spain and the rest of Europe.
1,75 million banned apps and 80.000 blocked developer accounts
The data shared by the company makes the scope of the problem and the response clear: 1,75 million apps were blocked before being published on Google Play for violating the platform's security, privacy, or fraud policies. These apps ranged from attempts to introduce malware to services with hidden subscriptions or unjustified access permissions.
To nip the problem in the bud, Google closed more than 80.000 developer accounts deemed malicious . These accounts were linked to repeated attempts to upload deceptive or harmful software, directly impacting user trust in the official store. Strengthening developer controls is one of the areas the company will continue to focus on in the coming years.
In parallel, the company has blocked approximately 255.000 apps from gaining excessive access to users' confidential data . In many cases, these were apps requesting permissions unrelated to their actual function, a common pattern among tools that seek to collect personal information without clear justification.
All this work is supported by a very demanding review system: Google Play performs more than 10.000 security checks for each application , combining automated analysis with human review to detect suspicious behavior before an app reaches the public.
Artificial intelligence, a key tool in the fight against increasingly complex attacks
One of the report's central messages is that artificial intelligence has become the heart of Google Play's defense system . The company acknowledges that cybercriminals are also using AI to better disguise their apps, modify attack patterns, and bypass traditional filters.
To address this increased complexity, Google has integrated new generative AI models into its review and monitoring processes . These tools enable faster detection of anomalous behavior, suspicious permission combinations, and patterns of financial fraud that might otherwise go unnoticed.
The company explains that Android's security relies on a combination of automated analysis, account monitoring, and collaboration with cybersecurity experts . The goal is to stop threats at their source, preventing them from resulting in real attacks such as data theft, unauthorized charges, or the silent installation of spyware on devices.
In this regard, AI tools also help identify networks of developers who act in a coordinated manner , reappearing with new accounts after being blocked. By correlating technical and behavioral signals, Google tries to reduce the "cat-and-mouse game" that occurs when fraudulent profiles are closed and new ones emerge.
The company insists it will continue investing in AI-based defense systems to anticipate new attacker tactics. The idea is that users won't have to worry about every technical detail and can download apps from the official store with reasonable peace of mind.
Google Play Protect: 27 million malicious third-party apps and 350.000 billion scans daily
Beyond the official store, much of the protection comes through Google Play Protect, the security solution integrated into Android . This system acts as a kind of permanent shield that analyzes the applications installed on the device, including those from sources other than Google Play.
According to the report, Play Protect analyzes more than 350.000 billion Android apps every day , a volume that illustrates just how widespread app use has become in the ecosystem. This continuous monitoring allows it to detect and neutralize suspicious software even after it has been installed.
During 2025, Play Protect's real-time analysis capabilities identified more than 27 million malicious apps from outside the Play Store . In many cases, these were installations initiated from third-party browsers, messaging services, or app stores—a common way to introduce malware or financial fraud tools.
The company further details that Play Protect's enhanced protection blocked 266 million attempts to install risky apps . These actions affected approximately 872.000 unique high-risk apps and were deployed on more than 2.800 billion Android devices across 185 markets, including Europe.
In the context of Spain and the European Union, where data protection regulations are particularly strict, these additional layers of security help to reduce the impact of malware campaigns and online scams that, in many cases, are distributed globally without regard for borders.
Financial fraud, phone scams, and the war against spam in reviews
The report also focuses on one of the issues that most concerns users and regulators: financial fraud through mobile applications . Google Play Protect has strengthened its ability to detect apps that attempt to access banking data , intercept verification codes, or subscribe users to paid services without their explicit consent.
Among the key measures is specific protection against phone scams . During active calls, the system prevents Play Protect from being deactivated, a tactic some criminals used to trick their victims into disabling the security and then installing a fraudulent app. This change aims to close a vulnerability that was being exploited repeatedly.
Another important area of focus is app reputation. Google claims to have blocked 160 million reviews and ratings deemed spam or fraudulent . Many of these were part of organized campaigns to manipulate app scores, either by artificially inflating them or launching negative review attacks to lower the average rating.
By preventing these manipulation attempts, the company claims to have avoided an average drop of 0,5 stars in the ratings of the apps targeted by these campaigns. For users, this means that the ratings and reviews they see on Google Play better reflect the actual experience, a key factor when deciding what to install on their phones.
In parallel, special emphasis has been placed on curbing unjustified access to personal data . This reinforcement aligns with the regulatory requirements of regions such as the EU, where privacy protection and control over user information are central elements of digital legislation.
An ecosystem under pressure and Google's plans to strengthen security
The figures for 2025 reflect an uncomfortable but undeniable reality: the volume of threats on Android is growing in tandem with the massive use of smartphones and apps . Blocking nearly two million apps in a single year speaks not only to Google's ability to control the market, but also to the magnitude of the problem facing these platforms.
Android, as the dominant operating system worldwide, remains a prime target for cybercriminals. Every new feature, permission, or integration with financial services opens up potential attack vectors that the company must monitor. That's why Google speaks of a constant effort to maintain Google Play and Android as "the most trusted app ecosystems . "
Looking ahead, the company is planning additional measures, such as extending mandatory identity verification to all developers . This requirement aims to reduce anonymity behind malicious apps and aligns with European regulatory demands for transparency and digital accountability.
Everything suggests that the combination of artificial intelligence, stricter controls on developers, and more rigorous filtering of permissions and reviews will continue to shape the company's roadmap. For users in Spain and the rest of Europe, the message is clear: downloading from the official store remains the safest option, but zero risk doesn't exist, and good security practices are still essential.
With the publication of this report, Google aims to demonstrate the scope of its surveillance efforts: 1,75 million malicious apps stopped, tens of thousands of accounts closed, millions of fraud attempts blocked, and intensive use of AI to stay one step ahead of attackers. The impact of these figures is noticeable in users' daily lives, who, although they may not see most of these threats, benefit from a more filtered ecosystem and security barriers that, at least for now, seem to be adapting to the pace of cybercrime.
