App impersonation is the creation of a fake application that copies the name, logo, screenshots, or description of a trusted product or service. The goal is to make users believe the app is legitimate long enough to install it, sign in, or grant permissions. In practice, the impostor may be a lookalike mobile app, a clone of a browser or bank tool, or a fraudulent listing in an app marketplace.
This matters because visual similarity can bypass quick user judgment even when the app is technically unrelated to the real vendor. Attackers use app impersonation to steal credentials, deliver adware or malware, collect data, or route traffic through a malicious service. Defenders look for mismatched developer names, strange package identifiers, weak reviews, and excessive permissions. Security teams also teach users to verify the publisher, not just the icon, because trust should come from identity checks, not branding alone.