While digging through the new Android 14 QPR2 Beta 2 release, I managed to surface a hidden “scanning for deceptive apps” page under Settings → Security & privacy → More security & privacy. Once enabled, this feature will apparently check “app activity for phishing or other deceptive behavior.” This will apparently be done by scanning the app for certain signs of deceptive behavior. Google says that “scanning runs privately right on your device” and that if phishing or other deceptive behavior is found, “some app info is sent to Google Play Protect to confirm the threat and warn app users.”

Is that phishing? Sounds like a lot of work to make an entire phishing app when you could use a webpage

I haven’t ever found Play Protect to be useful, but I’m fairly careful with what I download. Maybe others aren’t that lucky

But don’t most phishing schemes redirect you to a webpage what would scanning “apps” do? Guess it means your email client and SMS messenger