Calculator or Lender: How to Tell What an App Really Is
Summary
The reliable test is not the app name or its description, it is what the app asks for. A genuine calculator works on figures you type and needs no account, no contacts, no SMS access and no identity documents. An app that wants those is collecting data, whatever it calls itself, and the permission request tells you before you have given anything away.
What an app asks for tells you what it is. Descriptions can say anything, and names can borrow the credibility of a lender. Permissions and data requests are harder to dress up, which makes them the better test.
What a genuine calculator needs
Almost nothing. Arithmetic on numbers you type requires no account, no login, no network access to function, no contacts, no SMS, no call log, no photo library, no location and no identity documents.
That is the baseline. Measure any app named after a lender against it.
Requests that do not fit the stated purpose
- Contacts. There is no calculation that needs your address book. Harvested contact lists have been used to pressure borrowers by contacting the people they know.
- SMS or call log. No simulator needs to read your messages. This is a common route to intercepting one-time codes.
- Photos or file storage. A calculator has nothing to read there. Requests are often framed as uploading documents for a faster decision, which a calculator has no reason to want.
- Identity card, bank account or card numbers. No app that cannot lend you money needs these.
- Banking password or one-time PIN. Never, under any framing, for any reason, to anyone.
Reading the listing before installing
- Does it state plainly that it is unofficial and not affiliated with the brand in its name? A straightforward disclaimer is a good sign.
- Does it say clearly that it does not process applications or disburse funds?
- Check the data safety section on the store listing against what the description promises. Disagreement between the two is worth taking seriously.
- Be wary of urgency: guaranteed approval, instant disbursement, no checks. A calculator has no approvals to guarantee.
If you have already granted too much
- Revoke the permissions in your phone settings, one by one.
- Uninstall the app.
- If you entered banking credentials, contact your bank immediately and change the credentials from a device you trust.
- If you entered a one-time PIN, treat the account as compromised and say so to the bank explicitly.
- Check the entity against the Bank Negara Financial Consumer Alert List, and verify any claimed moneylending licence through kpkt.gov.my.
In short
Judge an app by what it asks for, not by what it is called. A calculator that wants your contacts is not a calculator.
