Play Protect scans apps from Google Play and other sources. A warning may arrive before installation or after the app is already on the phone. Treat it as a reason to pause, not as an invitation to turn scanning off because an installer tells you to.
Respond to the warning
- Open Play Store → profile icon → Play Protect directly and read the detected app name and requested action. Confirm the alert is in the real Play Store rather than a web page imitating Android.
- If you did not intentionally install the app or it came from a message, remove it. Follow Play Protect's uninstall or disable action and review other recently installed apps.
- If you believe the app is legitimate, check its real developer, official store listing and why it requested sensitive permissions. Avoid bypassing the warning merely because a caller or website insists. A false-positive claim should go through the developer's proper review channel.
- Update Android and the app store, then run another Play Protect scan. Review sensitive accounts used on that phone if the app had accessibility, notification or SMS access before detection.