App Store and Google Play: How to Remove Cloned Apps and Pirated APKs

Your fitness app has 200,000 installs and a healthy subscription business. Then your support inbox fills with complaints about "your" app crashing and showing ads you never added. The complainers installed "FitTrack Pro – Workout Planner," an app with your icon, your screenshots, your description and a decompiled copy of your code, published by a developer account you have never heard of. Meanwhile a search for your app name plus "mod APK" shows a dozen sites offering your premium tier unlocked for free.

Two distinct problems, two distinct fixes. Cloned apps inside the official stores are handled through Apple's and Google's intellectual property dispute processes, which are formal but reliable. Pirated APKs on third-party sites are handled through DMCA notices to the hosts and search engines, which is volume work. This guide covers both, with the evidence each requires and the steps that stop the cycle repeating.

Clones vs piracy: know which you are dealing with

In every case, gather evidence before reporting: screenshots of the clone's store page with URL and date, the developer name, the app's bundle or package ID, and for APK sites the download page URL, the file hash if you download it, and the host's details from WHOIS.

Removing cloned apps from Google Play

Google Play handles rights complaints through its intellectual property reporting process, which distinguishes between trademark, copyright and counterfeit claims. For most clones, file both trademark and copyright.

Trademark

Use Google Play's trademark complaint form. Provide your registration number and office, the infringing app's Play Store URL and package name, and a description of how the clone uses your mark (in the title, icon, developer name or description). Google generally acts within a few business days on a registered mark. Without registration, Google can still act on clear impersonation, but expect to show evidence of your prior use and reputation.

Copyright

Use Google Play's copyright complaint form (a DMCA notice). Identify your protected works — the icon, screenshots, description text, and, where you have decompiled evidence, the code itself — and the infringing app URL. Include the statutory elements: a good-faith belief that the use is not authorised by the copyright owner, its agent or the law; an accuracy statement under penalty of perjury; and your signature. For code copying, attach a short comparison showing matching class names, strings or resource files; a decompiler such as jadx produces readable output, and unique strings (your API endpoints, error messages, in-app text) are persuasive.

Impersonation and malware

If the clone pretends to be your official app or carries malware, also use the "Report inappropriate apps" flag on the listing and select impersonation or malicious behaviour. These reviews run on a separate track and can be faster than the IP process.

Removing cloned apps from the Apple App Store

Apple's App Store IP dispute process is run through its App Store Content Dispute form. You submit your details, the infringing app's App Store URL, the nature of the claim (trademark, copyright, or both) and your evidence. Apple then puts you in direct contact with the developer by email, with Apple copied, and expects the two parties to resolve the matter. If the developer does not respond or the dispute is not resolved, Apple may remove the app.

Practical notes from handling these:

• Be precise about which rights are infringed and attach the certificate or original works. Apple's process is slow when the claim is vague.
• Keep correspondence with the developer brief and factual. Many clones disappear as soon as the developer realises a rights holder is involved.
• If the developer offers to "rebrand," insist on removal of your copyrighted assets as well as the name; a rebrand with your screenshots is still infringing.
• For code copying, the comparison evidence matters more than on Google Play, because Apple will not analyse binaries for you.

For apps that impersonate yours to phish users, Apple's dispute form also accepts fraud and impersonation reports, and these are escalated differently.

Removing pirated APKs from third-party sites

APK sites are the volume problem. They number in the hundreds, many share infrastructure, and the files reappear. The process is standard DMCA work:

1. Find every copy. Search Google and Bing for your app name plus "APK," "mod APK," "premium unlocked," "cracked," and your package name. Search Telegram for your app name. Reverse-image search your icon. The free AI Scanner builds these queries for you.
2. Identify the host. WHOIS and IP lookup for each domain. Many APK sites use Cloudflare; file at cloudflare.com/abuse and Cloudflare forwards the notice and discloses the origin host.
3. File DMCA notices with each host, listing every URL on that host. Your app binary is a copyrighted work; modified versions are infringing derivatives. Include the statutory statements.
4. De-index with Google and Bing. File copyright removal requests for every download page. This is often the most effective single step, because APK sites live on search traffic. Our search engine de-indexing service handles this at scale.
5. Report Telegram channels distributing the APK to Telegram's abuse contact with channel links and file evidence. See our Telegram takedown guide.
6. Track and repeat. Log each URL, host, filing date and status. Re-scan weekly; new mirrors are normal.

Some APK sites claim to host only "original" APKs and argue redistribution is permitted. It is not, unless your licence allows it; a DMCA notice applies equally to unmodified unauthorised copies.

Dealing with third-party app stores

Beyond Google Play and Apple, clones and pirated builds appear on alternative Android stores (Aptoide, APKPure, Uptodown and others) and on regional stores. Each has a copyright or abuse reporting channel, usually a form or an abuse email. Treat them like APK hosts: find the channel, send a complete DMCA notice, de-index the pages from Google, and monitor.

Evidence that makes app disputes move

• Trademark registration covering software or apps (Class 9) and online services (Class 42) where relevant.
• Original icon, screenshots and description files with creation dates.
• Your app's store URLs and first-publication dates.
• Decompiled comparison for code copying: matching package names, resource files, unique strings and asset hashes.
• Screenshots of the clone's store page and, where possible, of the clone running with your UI visible.
• For malware or ad-injection, a short report from an analysis tool or a screenshot of unexpected ad SDKs in the manifest.
• User complaints about the clone, which demonstrate confusion and harm.

Protecting the app going forward

Removal is reactive. These measures reduce how often you need it:

• Register your trademark for the app name and logo in your main markets, in Classes 9 and 42. Store disputes are dramatically faster with a registration.
• Obfuscate and harden the build. ProGuard/R8 on Android, plus runtime integrity checks and server-side licence validation, make modding harder and make cracked builds break when your API changes.
• Move premium logic server-side. A "premium unlocked" APK is useless if entitlements are checked on your servers.
• Use Play Integrity and App Attest. These let your backend refuse requests from tampered or repackaged builds.
• Watermark screenshots and keep original assets off public repositories.
• Monitor monthly: search both stores for your name and icon, run the APK search set, and check Telegram. Our application protection service runs this continuously with filings included.

DMCA Master handles app clone and APK cases for developers at $100 per successfully removed URL (no removal, no fee), and runs ongoing protection with a dedicated specialist working 40 hours per week at $10 per hour, billed weekly at $400 per week, cancel any time. For apps facing dozens of APK mirrors, the ongoing model is usually the economical choice.

Frequently asked questions

How long do Google Play and Apple take to remove a clone? Google Play typically acts within a few business days on a complete trademark or copyright complaint. Apple's dispute process depends on the developer's response and can take one to several weeks; non-responsive developers are usually removed.

Can I report a clone without a registered trademark? Yes, through copyright (your icon, screenshots, text and code) and impersonation reports. Trademark registration makes the name-based claim far stronger and faster, so file an application regardless.

The APK site says it only redistributes my original app. Is that legal? Not without a licence from you. Redistribution of your binary is copying; a DMCA notice applies. Many such sites also serve modified or ad-injected versions.

Can I stop Telegram channels sharing my APK? Telegram acts on copyright reports sent to its abuse channel with specific channel and message links. Channels are often recreated, so pair reports with monitoring.

Will removing clones recover lost revenue? It stops the leak and removes the confusion driving bad reviews. Lost revenue is recoverable only through legal action against an identifiable developer, which is rarely cost-effective for small clones but worth evaluating for large ones.

This article is general information about app store enforcement and not legal advice. If a clone or pirated version of your app is live, request a free analysis and a specialist will map every copy and tell you what can be removed, with no obligation.