Yes. In May 2018, Zscaler ThreatLabZ documented several Android apps impersonating Fortnite, with behaviors ranging from spyware and covert cryptocurrency mining to ad-driven app and survey offers. The findings describe samples investigated at that time; they do not establish that the same apps or websites are active today.
What the 2018 investigation found
Android players were waiting for Fortnite’s release when Zscaler ThreatLabZ examined counterfeit apps using the game’s name. Zscaler’s report cited 45 million players and more than three million concurrent users as figures for 2018—not current player counts. The fakes were not one malware family with one behavior: the investigation found distinct spyware, a coin miner, revenue-generating promotions, and a fake V-Bucks offer.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Fortnite eGift Card | $50.00 | Buy on Amazon |
| 2 |
|
Fortnite eGift Card | $15.00 | Buy on Amazon |
| 3 |
|
Fortnite Physical Gift Card | $30.00 | Buy on Amazon |
| 4 |
|
Fortnite Physical Gift Card | $50.00 | Buy on Amazon |
| 5 |
|
Fortnite eGift Card | $25.00 | Buy on Amazon |
Read the original Zscaler ThreatLabZ report and the contemporaneous CyberScoop report for the May 2018 findings.
What the counterfeit apps could do
Spyware capabilities
One app presented itself as Fortnite but had extensive reported capabilities. Zscaler said it could access call logs and contacts, access SMS, make calls and send messages, use Accessibility functions to carry out some actions without user interaction, take pictures, wipe device data, access accounts and files, read keystrokes, and record audio.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11#1 Best Overall
- Redeemable on accounts in the United States and in U.S. Dollars.
- Gift card must be redeemed at EpicGames.com/redeem. This gift card WILL NOT work if redeemed directly on a console device (PlayStation, Xbox, Nintendo Switch, etc.)
- If you play Fortnite experiences on a console device, you need to link your Epic Games account to your console account(s) so items purchased at Fortnite.com/item-shop appear across all of your linked accounts
- Requires internet connection, valid Epic account and prior acceptance of the terms
- Redemption: Online
Those were capabilities reported by the researchers, not proof that all of those actions occurred or that data was stolen. At the time, Zscaler had not observed the spyware connect to its command-and-control servers. The team suggested it might still have been under development.
Covert cryptocurrency mining
A separate counterfeit APK hosted via androidapk[.]world contained CoinHive JavaScript. In its monitoring, Zscaler observed a significant increase in CPU use after installation. The researchers warned that hidden mining could slow a device and drain its battery; the app did not disclose that it was mining.
Rank #2
- Redeemable on accounts in the United States and in U.S. Dollars.
- Gift card must be redeemed at EpicGames.com/redeem. This gift card WILL NOT work if redeemed directly on a console device (PlayStation, Xbox, Nintendo Switch, etc.)
- If you play Fortnite experiences on a console device, you need to link your Epic Games account to your console account(s) so items purchased at Fortnite.com/item-shop appear across all of your linked accounts
- Requires internet connection, valid Epic account and prior acceptance of the terms
- Redemption: Online
Ads, surveys, and app promotion
Some fake Fortnite offers directed users to ads, surveys, or additional app downloads that earned revenue for their authors. These schemes could waste users’ time or lead them to install unwanted apps even when the offer did not behave like the spyware or miner.
A fake free V-Bucks offer on Google Play
Zscaler also found a fake V-Bucks app on Google Play. It did not provide free in-game currency: after a purported human-verification step, it led users to surveys and other downloads. The app reportedly prompted users to post suggested five-star reviews. Before Zscaler notified Google and the listing was removed, the app had more than 5,000 downloads and more than 4,000 five-star ratings, according to the 2018 report.
Rank #3
- An Epic Games account is required to redeem an Epic Games Store Card code
- If playing on a console platform (PlayStation Network, Xbox Live, Nintendo Switch or Mobile) you need to link your Epic Games account to that gaming platform (one time) to redeem your gift card code
- The 16 digit code on the back of the card WILL NOT work if redeemed directly through your gaming platform (PlayStation Network, Xbox Live, Nintendo Switch, Mobile, etc.)
- Note: Nintendo devices do not support Fortnite Shared Wallet, so V-Bucks purchased using your account balance will not show up on your Nintendo device. However, if you purchase items in the web Item Shop — or another platform where you play Fortnite — those items will be available in your Locker across all platforms.
- Redemption: Online
The episode shows that a Play Store listing, polished icon, or strong rating is not conclusive proof that an app is legitimate. CyberScoop described Play Store apps as generally safer than downloads from third-party sites, but the fake listing demonstrates why users still need to check what an app is asking them to do.
How to assess a Fortnite APK or offer
These checks are warning signs, not a single definitive test. A legitimate source and a plausible request matter more than an app’s name, icon, or star rating alone.
Rank #4
- An Epic Games account is required to redeem an Epic Games Store Card code
- If playing on a console platform (PlayStation Network, Xbox Live, Nintendo Switch or Mobile) you need to link your Epic Games account to that gaming platform (one time) to redeem your gift card code
- The 16 digit code on the back of the card WILL NOT work if redeemed directly through your gaming platform (PlayStation Network, Xbox Live, Nintendo Switch, Mobile, etc.)
- Note: Nintendo devices do not support Fortnite Shared Wallet, so V-Bucks purchased using your account balance will not show up on your Nintendo device. However, if you purchase items in the web Item Shop — or another platform where you play Fortnite — those items will be available in your Locker across all platforms.
- Redemption: Online
- Check the source. Use the publisher’s authorized channels or an authorized store; do not treat a third-party download site as official just because it offers a Fortnite-branded APK.
- Question free currency promises. A claim that an app will provide free V-Bucks is a reason for caution, especially if it requires a “human verification” step.
- Notice unrelated tasks. Surveys, suggested reviews, or required downloads of unrelated apps do not verify that an offer is genuine.
- Review sensitive permissions. An app asking for Accessibility access or other powerful capabilities deserves particular scrutiny when those requests do not fit its stated purpose.
- Treat ratings as one signal. The fake Google Play listing documented by Zscaler had thousands of five-star ratings before removal, so positive reviews alone cannot establish legitimacy.
What to do if you installed one
Zscaler’s 2018 guidance for an app labeled Fortnite was to turn off its Accessibility access and uninstall it. Android menu names and recovery options vary by version and device, so that historical advice should not be mistaken for a universal current menu path.
- Revoke Accessibility access for the suspicious app if it has been granted. Find Accessibility settings on your device and disable the app’s service; the exact path depends on the Android version and manufacturer.
- Uninstall the app using your device’s app settings or launcher. If it cannot be removed or the device behaves unexpectedly, consult the device maker’s support guidance.
- Review sensitive account activity. Since the reported spyware capabilities included access to accounts, messages, and keystrokes, check important accounts for unusual activity and change credentials from a device you trust if you suspect they may have been exposed.
- Keep installation restricted to authorized sources. Zscaler recommended disabling Android’s “Unknown Sources” option to reduce inadvertent installations. The control’s current name and location can differ across Android versions.
The report does not establish that every capability was exercised, nor does it show that a particular security product is required or would reverse every possible effect. It also does not verify whether the samples, domains, or listings remain available today, or identify Fortnite’s present-day official Android distribution route. Check current official sources before downloading.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Best Value
- Redeemable on accounts in the United States and in U.S. Dollars.
- Gift card must be redeemed at EpicGames.com/redeem. This gift card WILL NOT work if redeemed directly on a console device (PlayStation, Xbox, Nintendo Switch, etc.)
- If you play Fortnite experiences on a console device, you need to link your Epic Games account to your console account(s) so items purchased at Fortnite.com/item-shop appear across all of your linked accounts
- Requires internet connection, valid Epic account and prior acceptance of the terms
- Redemption: Online
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
