How Google Play Protect works and what an 'App blocked' message means
If you have installed an app from outside the Play Store, you may have seen a message from Google Play Protect. This guide explains what it is, why it appears, and how to think about it.
What Play Protect is
Google Play Protect is the security system built into Android phones that have Google Play. It does three main jobs:
- It checks apps in the Play Store before they are published.
- It scans apps already on your phone, from any source, looking for known harmful behavior.
- It can send an app it has never seen to Google for a closer look.
Its settings are in the Play Store app: tap your profile picture, then Play Protect.
The messages you may see
| Message | What it usually means |
|---|---|
| "Unsafe app blocked" or "App blocked" | Play Protect decided that the app, or something it asks for, is too risky and stopped the install. |
| "Send app for scanning?" | Google has not seen this app before and would like a copy to check. |
| "Harmful app removed" | The app was matched with known malware. |
Why a harmless app can be blocked
Play Protect judges apps by what they ask for, not only by what they do. An app that requests a very sensitive permission, such as the accessibility service, can be flagged because criminals abuse that same permission. A new app with few installs, signed by an unknown developer and installed from a file, looks the same to the system as a malicious one.
So a block is not proof that an app is bad, and the absence of a block is not proof that it is good. It is a warning sign that deserves a few minutes of checking.
What to do when you see one
- Stop and check the source. Did you get the file from the developer's own site or the Play Store? If it came from a link in a message, a comment or a file-sharing site, delete it.
- Look at what it asks for. Does the app really need that permission for its job? See our guide on spotting apps that ask for too much.
- Look for a public track record. An open-source repository, reviews on independent sites, a developer you can contact.
- Don't weaken your security for something you can't verify. If you are not sure, the safe answer is to not install it.
Keep Play Protect on
Whatever you decide about one app, keep Scan apps with Play Protect enabled. It is one of the few automatic checks on your phone and it catches many real threats.
Summary
Play Protect errs on the side of caution. A warning means "check this carefully", not "this is a virus" and not "ignore me". Verify the source and the permissions, and keep the protection on.