Science & Tech · Cybersecurity · 2 days ago
Fake apps linked to unauthorised PayPay transfers from bank accounts
A man in Japan said nearly all the money in his linked bank account was taken through unauthorised PayPay transfers.
He noticed the loss when his bank app showed three transfers to PayPay and his account balance had fallen to 4,660 yen.
PayPay says suspected malware-related transfer cases have increased since around August, with fake apps offered outside trusted app stores among the suspected entry points.
One example is a fake app called “TikTok 18+,” which is not affiliated with TikTok and has prompted a warning from Osaka police.
Malware can let someone remotely control a phone and use PayPay to make transfers or payments without the owner’s knowledge.
PayPay says it has strengthened round-the-clock monitoring and that cases are declining.
Users should install apps only from trusted stores and check PayPay transactions if they suspect an infection; people who find unauthorised transactions can check whether they qualify to apply for compensation.
PayPay says reports of unauthorized transfers from devices suspected of malware infection have risen since around August.
The company says fake apps downloaded from untrusted sites can let third parties remotely control phones and make unauthorized payments or transfers.
A man in his 50s reported that money was taken from his linked bank account after he tried to download a fake app called “TikTok18” on an Android phone.
PayPay says it monitors transactions around the clock using AI and dedicated staff, and that the number of cases has been declining.
Authorities and PayPay advise users to download apps only from trusted stores and not to grant settings or permissions that allow outside control of a phone.
- Who
- PayPay users whose phones may have been infected with malware. One reported victim is a self-employed man in his 50s in the Hokuriku region.
- What
- Unauthorized transfers have been reported from bank accounts linked to PayPay after malware-infected phones were remotely controlled.
- When
- PayPay says suspected malware-related cases have increased since around August 2026. Reports drew attention in late October.
- Where
- Japan; the reported victim lives in the Hokuriku region.
- Why
- Fake apps distributed through untrusted sites or links can infect phones and allow third parties to control them remotely.
This story does not have two clearly opposing sides.
PayPay says reports of unauthorized transfers from devices suspected of malware infection began increasing.
PayPay issued an alert about malware infections and unauthorized transfers involving suspicious apps.
The reported victim tried to download an app called “TikTok18” on his Android phone and stopped the download partway through.
The man opened his local bank app and found his balance had fallen to 4,660 yen.
Reports of PayPay-linked accounts being used for unauthorized transfers attracted attention on X.
- Reported victim
- Self-employed man in his 50s in the Hokuriku region
- Bank balance discovered
- 4,660 yen
- Suspected fake app
- TikTok18
- PayPay monitoring
- 24-hour monitoring by AI and dedicated staff
- Recommended app stores
- Google Play and App Store
3 sources
What people are saying
I was scared during the installation and stopped it, but it seems it was too late.
I was told by the police that it may have been remotely controlled because of that.
How am I supposed to get through this... I panicked so much that now I’m just stunned.