Uninstall the app, change any password you used inside it (and anywhere else you reused that password), check your device permissions for anything the app was granted, and monitor accounts tied to any information you entered.
Most of the guidance on this site is about checking before you install. This page is for after — you’ve already installed something in the Yono-style gaming cluster and now have doubts about it. Here’s a practical sequence, not a general lecture.
First: uninstall it
Go to your device’s app settings and uninstall the app directly. Don’t rely on just closing it or clearing its cache — a full uninstall removes the app’s ability to run in the background.
Second: change any password you used in it
If you created an account with a password, change that password immediately — and if you reused that password anywhere else, change it there too. Password reuse is what turns one bad install into a much wider problem.
Third: check what permissions it had
Look through your device’s permission manager for anything the app was granted — SMS, contacts, accessibility services, and so on. Revoke anything still listed as active, and be aware that some permissions (like accessibility access) can persist in unusual ways worth double-checking after uninstall.
Fourth: watch the accounts that matter
If you entered a phone number, email, or any payment information, treat those as potentially exposed. Watch for unexpected OTP requests, login alerts you didn’t trigger, or unfamiliar charges, and act on them immediately rather than waiting to see if anything happens.
Fifth: don’t reinstall to “check again”
It’s a common instinct to reinstall a suspicious app just to look for something you missed. Don’t — if you have doubts, review our APK safety checklist and login safety checklist for what to look for from search results and screenshots instead of putting it back on your device.
None of this guarantees nothing bad happened — it minimizes the chance that one bad install turns into a bigger problem, which is the realistic goal here.
If you shared an OTP, UPI PIN, or bank details
Act before anything else:
- Call your bank’s official number (on the back of your card or in its official app) and ask them to block your cards, UPI, and net banking until you have changed credentials.
- Report to the National Cyber Crime Helpline on 1930 or at cybercrime.gov.in, especially if money has already left your account. Reporting within hours gives the best chance of the money being frozen.
- Change your UPI PIN and banking passwords from a different, trusted device.
Check the places malware hides
- Accessibility services: Settings > Accessibility. Turn off anything you don’t recognise under downloaded or installed services.
- Device admin apps: search Settings for “device admin”. An app with admin rights may refuse to uninstall until you remove its admin access.
- Remote-access apps such as AnyDesk or TeamViewer, if someone asked you to install one.
- Play Protect scan: Play Store, profile picture, Play Protect, then Scan.
Compare with the genuine file
If the app claimed to be one of the 14 platforms in our directory, you can tell whether you had the genuine file. Those files request nine permissions and none reach SMS, accessibility, or device admin (details). If yours asked for any of those, it wasn’t the file we checked.
Last resort: factory reset
If an app keeps coming back, or you can’t remove its admin or accessibility access, back up your photos and contacts and factory-reset the phone. Then restore only what you need, and don’t reinstall the app.
allyonoearnYONO GAMES / FIELD GUIDE
Explore Games →
⌕