Android users have reported intrusive ads appearing immediately after calls end. Researchers say deceptive utility apps on the Google Play Store drive the problem by abusing permissions that let them display content over other apps.

These apps often disguise themselves as harmless alarm clocks, calendars, messaging tools or other everyday utilities. Once installed, they can show full-screen advertising outside their normal app environment.

How Android AfterCall ads work

The apps abuse Android’s “Appear on top” permission, also known as SYSTEM_ALERT_WINDOW. This permission lets an app display content over other applications.

Android requires users to enable the permission manually through Settings. However, fraudulent developers manipulate the setup process to convince users to grant it.

For example, an alarm app may claim that it needs overlay access to work while a phone is locked. A calendar app may refuse to open unless the user enables the permission.

After gaining access, the app listens for Android system events. It can detect when a phone call starts and when it ends. When the call reaches an idle state, the app immediately launches an advertisement.

Apps hide from users after installation

The fraudulent apps often remove themselves from the Recent Apps list, making them harder to identify and uninstall. Users may then blame their phone, calling app or mobile network instead.

Some of the apps also prompt users to install dubious cleaners or antivirus tools. These extra downloads may generate further ads or create additional security risks.

Researchers have identified dozens of similar apps each month. Collectively, they can generate hundreds of millions of advertising impressions.

How to remove suspicious apps

Users should review which apps have permission to appear over other apps. On Samsung devices, open Settings, select Apps, then open More options, choose Special access and tap Appear on top.

Look closely at recently installed clock, notes, calendar or messaging apps. Most legitimate utility apps do not need this permission.

Turn off overlay access for any app that seems suspicious, then uninstall it. The app may ask for permission again after the next call, so removing it remains the safest option.

If the ads continue, start the phone in Safe Mode and remove recently installed applications. Android users should also avoid granting special permissions unless the app has a clear and legitimate reason to need them.


0 responses to “Android AfterCall Ads Hit Users Through Deceptive Utility Apps”