Sophos: more than 30 “fleeceware” apps on the App Store, including some of the highest-grossing ones, are abusing free trial mechanics to charge obscene fees
Context & Ripple Effects
Sophos' App Store report is the iOS sequel to its own January finding of 25 fleeceware apps on the Play Store with 600M+ installs — same free-trial mechanic, now confirmed on Apple's side of the fence, and including some of the App Store's highest-grossing apps. That last detail matters: trial abuse isn't a fringe revenue trick, it's producing top-tier grossing numbers inside Apple's curated store.
The disclosure sits in a research arc that keeps expanding — from the Play Store in January, to the App Store here, and later to 204 fleeceware apps across both stores — suggesting Sophos treats fleeceware as an ongoing beat rather than a one-off exposé.
First-order effects
- App Store subscribers are being charged recurring fees after trials they didn't knowingly convert, and because some offenders rank among the store's highest-grossing apps, the victims number in whatever scale 'highest-grossing' implies.
- Apple's review process takes the reputational hit: apps that clear curation while monetizing via deceptive trial mechanics undercut the store's core safety pitch.
Second-order effects
- Apple faces pressure to tighten free-trial and auto-renewal mechanics in App Review, since the offending apps' revenue depends entirely on defaults the platform controls.
- The playbook spreads across platforms — the same researchers who flagged the Play Store in January now flag the App Store, so developers running trial-abuse schemes have no safe store left, while security firms like Sophos build a publishing cadence around these findings.
Third-order effects
- If the pattern holds toward the later 204-app cross-store tally, fleeceware becomes a structural category problem for subscription app economics, pushing both Apple and Google toward default-on cancellation flows and stricter trial disclosures.
- Consumer-protection scrutiny of app store billing follows the money: when trial mechanics generate top-grossing revenue, regulators and platform policies converge on auto-renewal consent as the choke point.
The trend: Fleeceware is migrating from Android to iOS and scaling up, turning app store free-trial mechanics into a recurring target for security researchers and, eventually, platform policy changes.