Sideloading risk, in plain terms

An app installed from outside a store skips the store's screening and its update channel. You are trusting whoever assembled that specific file. Because these files are passed around in chat groups and re-uploaded constantly, the copy you receive is often several hands away from whoever built the original.

• •Accessibility services — the broadest permission on the platform; it can read and act on other apps' screens.
• •SMS access — lets an app read the one-time codes protecting your other accounts.
• •Contacts — has no gameplay purpose and typically feeds referral spam.
• •Install other apps — a single grant that opens the door to further payloads.
• •Overlay on top of other apps — the basis of screen-capture and tap-hijacking attacks.

• •Chat-group posts promising a hack, mod or unlimited-balance build.
• •Shortened links and file-locker pages that reward each download.
• •Video descriptions and comment sections aimed at people searching for tricks.
• •Clone websites that mirror an operator's look and swap only the download button.
• •Direct messages from an 'agent' offering a private or early-access build.

• •Uninstall it, then revoke any accessibility, SMS or overlay permission it was granted.
• •Change passwords from a different device — not from the one in question.
• •Check messaging and banking apps for sessions or devices you do not recognise.
• •Review recent transactions and enable alerts on every payment method involved.
• •If anything looks wrong, a factory reset is slow but decisive.