Additional resource for the lesson “Fleeceware: Apps With Hidden Subscription Costs” — Online Security course
Fleeceware is not malware. It is an app that does something trivial, charges a great deal for it through a subscription that is easy to start and hard to notice, and stays entirely within the store’s rules while doing so.
A. Why this matters
The other resources in this cluster describe apps that do something they should not. Fleeceware is different: it does exactly what it says, charges an amount out of all proportion, and relies on the subscription being easier to start than to notice.
It is not a security problem in the usual sense. Nothing is stolen and nothing is broken. It is a design problem, and it works because subscription mechanics on both stores favour the seller.
The key idea: the risk here is not technical, so no security setting prevents it. What prevents it is checking the subscription list — a screen most people have never opened.
B. Key concepts
Six ideas about how the charge happens.
Fleeceware
An app charging far more than its function is worth, usually through a recurring subscription.
Why it matters to you: It is legal, present in both official stores, and generally does not violate policy. Which is why store review does not catch it.
The short free trial
Three days is common. The subscription begins automatically unless cancelled before it ends.
Why it matters to you: Three days is short enough that people forget, and the app rarely reminds you. This is the mechanism, and it is deliberate.
Dark patterns
Interface design that makes one choice easy and the other difficult: a prominent subscribe button, a small close button, a cancellation path several screens deep.
Why it matters to you: Recognising the term is useful because it names something people experience and assume is their own confusion.
Where the subscription actually lives
On both platforms, subscriptions are managed in the store account, not in the app.
Why it matters to you: This is the most useful practical fact in this resource. Deleting the app does not cancel the subscription — a mistake that costs people months of charges.
What tends to be sold this way
Torches, QR scanners, wallpaper collections, basic photo filters, fortune tellers, simple utilities.
Why it matters to you: Things the phone already does, or that are worth very little. That mismatch is the signal.
The store’s refund process
Both Apple and Google have a refund request process, and both grant refunds for accidental subscriptions reasonably often.
Why it matters to you: Worth knowing: people frequently assume the money is simply gone.
C. A practical example: a scanner for thirty euros a month
A document scanner is needed once, for one form. The first result in the store is free to try.
- The trial is three days.
- The subscription afterwards is thirty euros a month, stated in small text on the screen where you tap to begin.
- The document is scanned. The app is deleted the same afternoon.
Three days later the subscription begins, and continues, because deleting the app did not cancel it. It is noticed four months later on a card statement.
What would have prevented it
- Reading what happens after the trial before starting it.
- Cancelling the subscription immediately after subscribing — on both stores you keep access until the trial ends.
- Checking the subscription list monthly, which takes about a minute.
- Noticing that both phones now include a document scanner.
The second point is the useful trick: cancel as soon as you start the trial. Access continues to the end of the period, and the charge never begins.
D. Try it yourself: open the subscription list
Ten minutes, and most people find something.
Step 1 — Find the list
- iPhone: Settings, your name, Subscriptions.
- Android: Play Store, profile, Payments and subscriptions.
Step 2 — Read it all
- Including anything inactive but recently expired.
- Note anything you cannot name or did not know was recurring.
Step 3 — Cancel what you do not use
- You keep access until the current period ends.
- This is why cancelling immediately after starting a trial is safe.
Step 4 — Check your card statement
- Some charges do not appear in the store list, particularly those taken directly by a service.
- Look for recurring amounts you cannot place.
Put a recurring reminder in the calendar for this. Once a month is enough, and it is the only reliable defence against something designed to go unnoticed.
E. Videos, articles and further resources
Independent and institutional sources in English.
FTC — Protect your personal information from hackers and scammers
Consumer guidance on deceptive practices, including subscriptions that are hard to cancel.
https://consumer.ftc.gov/articles/protect-your-personal-information-hackers-and-scammers
FTC — How to spot, avoid and report tech support scams
The rule worth remembering: a genuine security warning never asks you to call a number.
https://consumer.ftc.gov/articles/how-spot-avoid-and-report-tech-support-scams
Google — Use Play Protect to keep your apps safe and your data private
Where subscriptions are managed and how refunds are requested. Platform documentation.
https://support.google.com/android/answer/2812853?hl=en
FTC — Malware: how to protect against, detect and remove it
The signs that something is wrong with a device, and the sequence to follow to clean it.
https://consumer.ftc.gov/articles/malware-how-protect-against-detect-and-remove-it
ConnectSafely — Parent and educator guides
Relevant if the phone is shared with children — the companion resource covers that case.
https://www.connectsafely.org/guides-2/
NCSC (UK) — Cyber security advice for you and your family
The UK national authority’s advice hub for individuals: short, practical guidance written for people who are not IT professionals.
https://www.ncsc.gov.uk/section/advice-guidance/you-your-family
Links checked in August 2026. Both Apple and Google document their subscription and refund processes, and those pages are the practical reference.
F. The Cyber Welfare Framework: Skills, Awareness, Secure Behavior
This lesson sits on the Awareness pillar at level FL2. It is consumer protection more than security, and belongs here because the mechanism is the same.
Skills
- Finding and reading the subscription list on both platforms.
- Cancelling a trial immediately while keeping access.
- Requesting a refund for an accidental charge.
For professionals and organizations
- Reviewing app subscriptions on company devices, where recurring charges are easily absorbed.
Awareness
- Understanding that deleting an app does not cancel its subscription.
- Recognising dark patterns as design rather than as your own confusion.
- Knowing that fleeceware is legal, which is why nothing blocks it.
For future instructors and ambassadors
- Naming dark patterns explicitly. People find it relieving to learn the confusion was engineered.
Secure Behavior
- Checking the subscription list monthly.
- Cancelling trials at the moment of starting them.
- Preferring built-in functions over apps that duplicate them.
For organizations
- Restricting in-app purchases on managed devices.
G. Questions to sit with
- When did you last open your subscription list? Do you know where it is?
- Are there recurring charges on your card you could not name?
- Have you ever deleted an app assuming that cancelled the subscription?
- How many apps do you pay for that duplicate something the phone already does?
H. What to do now
The recommendations (R) and security measures (MS) that apply here.
Before installing
- R17 — Install only what you went looking for, from official stores.
- MS7 — Read what happens after the trial, on the screen where you tap to begin.
Minimum commitment: And the practical rule: cancel the trial as soon as you start it. Access continues; the charge does not.
Ongoing
- MS12 — Review recurring charges as you would review anything else attached to your accounts.
- R8 — Turn on transaction alerts from your bank, which surfaces these quickly.
In short
- Fleeceware is legal, which is why store review does not stop it.
- Deleting the app does not cancel the subscription.
- Cancel the trial the moment you start it — access continues to the end.
- Check the subscription list monthly. It is the only reliable defence.
Related resources in this course
Related costs and checks:
- Unexpected Phone Charges: When the Bill Is the Signal
- Protecting Yourself from Scam Apps: Tips for Child Safety
- Fake App Reviews: Why the Rating Tells You Little
Discover more companion resources from the online courses of the Protect Your Digital Privacy programme.
If you would like to follow the whole path, the Cyber Welfare Program is free and open to everyone.
Leave a Reply