Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

TapTrap is an Android tapjacking technique that uses activity-transition animations to make a tap land on a hidden interface instead of the one you think you are touching. It can expose sensitive actions without the malicious app requesting permissions of its own. The researchers reported that Android 13, 14, 15, and 16 were fixed by the December 2025 security update; whether that update has reached a particular phone depends on its manufacturer and rollout.

How does TapTrap work?

TapTrap exploits the brief transition animation Android plays when moving between activities—the separate screens or interface components used by apps. A malicious app can arrange for a transparent or apparently harmless screen to appear during that transition. The screen the user sees and the interface that receives the tap can then differ.

The user still performs the tap. The deception is that the operating system can register it on a hidden, security-relevant interface rather than the benign-looking one in view. The researchers describe this as a way for an app that requests no permissions to undermine the trust users place in the interface.

Depending on the scenario, a misdirected tap could help an attacker trick someone into granting camera or location access, expose sensitive information, redirect a web click, or start a destructive operation such as a factory reset or full device wipe. These are demonstrated attack paths, not evidence that every TapTrap attempt can perform every action on every device.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
HPTech 2 Pack Privacy Screen Protector for Samsung Galaxy A12/A13/A32/A03s
  • Compatible Model: Specifically Designed for Samsung Galaxy A12, A13, A32, A03s, A02s, A42. Please double check your device model before purchasing
  • Privacy Protection: Screen is only visible to persons directly in front of screen, Keep your information safe and prevent others from viewing the information by looking over
  • Superior Quality: 0.33mm ultra-thin tempered glass, Highly durable, and scratch resistant, surface hardness 9H and topped with oleophobic coating to reduce fingerprints
  • Case Friendly: Compatible with most mobile phone cases on the market, Extra space is left around the borders for your case to wrap around the edges of your phone
  • HPTech is committed to provide 100% customer satisfaction, Please email us by Via Amazon message System for any questions

How is TapTrap different from conventional overlay tapjacking?

Android’s usual tapjacking guidance focuses on overlays: another app’s interface is placed over the target, potentially obscuring all or part of it. TapTrap instead abuses activity-transition animations, so the deceptive interface need not be a conventional overlay.

Comparison Conventional overlay tapjacking TapTrap
Attack mechanism An overlay obscures or covers part of the target interface. An activity-transition animation creates a mismatch between the visible interface and the one receiving the tap.
Special overlay permission Depends on the overlay technique; a permission is commonly relevant to drawing over other apps. The researchers describe a zero-permission attack: the malicious app does not need to request permissions of its own.
What defenses examine Overlay and obscured-touch protections can identify or filter touches through an obscuring layer. A conventional overlay detector may miss the animation-based mechanism.
Potentially exposed action A tap on a covered control may activate a target action. Demonstrated paths include permissions, sensitive information, web clicks, and destructive operations.
Mitigation Android documents obscured-touch handling, including View.setFilterTouchesWhenObscured(true) for full occlusion. Install the applicable platform security update; disabling system animations is the project’s temporary workaround for unpatched devices.

Android’s documented View.setFilterTouchesWhenObscured(true) mitigation applies to full occlusion. It is useful guidance for developers handling overlay risks, but it does not by itself address TapTrap’s different animation-based mechanism.

Rank #2
Lokyoo 2 Pack Privacy Screen Protector for Samsung Galaxy S23 Plus/ S23+
  • 【Compatible with Samsung Galaxy S23+/S23 Plus】Include 2 Pack Tempered Glass Privacy Screen Protector for Galaxy S23+/S23 Plus 【Support Finger Print Unlock】. Please check your phone model before purchase.
  • 【Privacy Protection】 Privacy glass screen is only visible to person who is directly in front of Screen. Protect your personal privacy effectively.
  • 【Case Friendly】Compatible with most mobile phone cases.
  • 【Easy Installation】 A handy installation tray is provided for your easy quick installation, not easy to fall off, no bubbles.
  • 【Superior Quality】9H hardness privacy screen protector resists accidental drops and impacts. Light transmittance of 99.9%, maintain original touch experience and HD screen.

How widespread is the demonstrated risk?

In a 2025 USENIX Security study, researchers classified 76.3% of 99,705 downloaded Google Play apps as vulnerable under the study’s app and transition conditions. That figure is not the share of all Android apps, does not mean those apps were malicious, and does not show that they were exploited.

The researchers found no evidence of TapTrap exploitation in the wild in the sample they analyzed. In a user study of 20 participants, every participant failed to notice at least one attack variant. That result shows the deception could escape notice in the study; it does not establish how often users would be fooled in general use.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Lokyoo 2 Pack Privacy Screen Protector for Samsung Galaxy S25 Plus/ S25+
  • 【Compatible with Samsung Galaxy S25+/S25 Plus】Include 2 Pack Tempered Glass Privacy Screen Protector for Galaxy S25+/S25 Plus【Support Finger Print Unlock】. Please check your phone model before purchase.
  • 【Privacy Protection】 Privacy glass screen is only visible to person who is directly in front of Screen. Protect your personal privacy effectively.
  • 【Case Friendly】Compatible with most mobile phone cases.
  • 【Easy Installation】 A handy installation tray is provided for your easy quick installation, not easy to fall off, no bubbles.
  • 【Superior Quality】9H hardness privacy screen protector resists accidental drops and impacts. Light transmittance of 99.9%, maintain original touch experience and HD screen.

Is your Android phone patched?

The TapTrap project page reports that Android 13, 14, 15, and 16 were fixed by the December 2025 security update. Google’s December 2025 Android Security Bulletin states that patch levels 2025-12-05 or later address all issues in that bulletin and advises users to check the device’s security-patch level. These statements do not guarantee that a particular phone has received the fix: updates are distributed by device manufacturers and can vary by region and model.

  1. Install the newest Android update offered for your exact device.
  2. Open the phone’s Android version or security information in Settings and check the displayed Android security update date or security-patch level. The menu wording and location can vary by manufacturer.
  3. If the displayed patch is older than December 2025, or you cannot confirm that the relevant update is installed, check with the manufacturer or carrier for your model’s update status. A newer available update is preferable to relying on a temporary workaround.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What can you do if your device is not patched?

Disable system animations as a temporary workaround

The TapTrap project recommends disabling system-wide animations in Accessibility settings on an unpatched device. This changes normal interface behavior and is a workaround, not a substitute for the platform security update. Settings labels and paths vary across Android versions and manufacturers.

Rank #4
JETech Privacy Screen Protector for Samsung Galaxy S24, 2-Pack
  • [Fingerprint Unlocked] Designed for Samsung Galaxy S24 5G 6.2-inch. For a better unlocking experience, please go to Settings of your device to activate the Touch Sensitivity and re-enter your fingerprint after applying the film
  • [Privacy Protection] Screen is only visible to person directly in front of screen. Protects your personal privacy effectively and ensures comfortable viewing experience
  • [Premium Material] Built with 9H high hardness tempered glass. Highly protect the screen from unwanted scratches and abrasions
  • [Anti-Fingerprint] The hydrophobic and oleophobic coating effectively prevents the residue of fingerprints, oil and watermark from gathering on the screen
  • [Case-Friendly] There is enough edge space around the borders for your case to wrap around the edges of your mobile. Compatible with most phone cases

Pause when an unexpected prompt appears

  • Be cautious if a permission request, device-administrator prompt, browser confirmation, reset screen, or wipe action appears without a clear reason in the app you are using.
  • Do not tap through a prompt simply because it appears over an app you trust. Stop and verify what action the prompt describes before approving it.
  • Keep Android and Google Play system updates current. Google Play system updates and the Android security-patch level are distinct update indicators, so check the security-patch level when confirming the platform fix.

What should Android developers review?

Developers should follow Android’s tapjacking guidance and test sensitive flows for cases where the visible activity differs from the activity receiving input during transitions. Overlay-focused protections remain relevant to conventional tapjacking, but animation-driven behavior requires checking transitions as well. Review any flow that grants permissions or performs a security-sensitive or destructive action, and make sure its visual context and tap target stay aligned.

Quick Recap

Bestseller No. 2
Lokyoo 2 Pack Privacy Screen Protector for Samsung Galaxy S23 Plus/ S23+
Lokyoo 2 Pack Privacy Screen Protector for Samsung Galaxy S23 Plus/ S23+
【Case Friendly】Compatible with most mobile phone cases.
$9.99
Bestseller No. 3
Lokyoo 2 Pack Privacy Screen Protector for Samsung Galaxy S25 Plus/ S25+
Lokyoo 2 Pack Privacy Screen Protector for Samsung Galaxy S25 Plus/ S25+
【Case Friendly】Compatible with most mobile phone cases.
$9.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.