The fake apps often request sensitive user information, such as login credentials, credit card numbers, and personal data, which can be used for malicious purposes, including:

Al instalar código no verificado, los ciberdelincuentes obtienen control remoto del dispositivo, permitiéndoles vaciar las cuentas reales del usuario.

Be cautious when granting permissions to apps. If an app requests access to information that seems unnecessary for its functionality, it might be malicious.

Our research indicates that numerous fake Yape 5.4 apps have been created, with some of them being distributed through third-party websites, social media, and messaging platforms. These apps often mimic the legitimate Yape app, with similar logos, icons, and user interfaces, making it challenging for users to distinguish between genuine and fake versions.