Maybe the developer's name -- Deviant Solutions -- should have been a hint. But ignoring that red flag, 10,000 customers paid $4 each to download an app that became, briefly, Google Play's best-seller: "Virus Shield."
Interested in ?Add as an interest to stay up to date on the latest news, video, and analysis from ABC News.
Its success violated a principle even more immutable than Moore's Law, which governs computing power: You can't get something for nothing.
In exchange for their $40,000 collectively spent on the app, buyers got absolutely zilch, according Android Police, an app review site.
"Don't believe us?" Android Police challenged readers on its site. "Then check out the code for yourself. We've confirmed that this app is totally and completely devoid of any security benefit." They further said, "Several Google+ users have helped us to confirm its bogus nature."
Virus Shield, according to the app's self-description, promised to protect a user's device from harm by scanning apps, settings, files and media for viruses in real time.
Android Police found that Virus Shield lacked the software to do any of that. All it did, in response to a finger-tap on its screen, was change an "X" mark into a check-mark, implying (falsely) that it had scanned and found no viruses. "Let's not mince words here," said Android Police. "This is a fraud, pure and simple."
Google, without acknowledging any problem with the app or issuing a statement, has now withdrawn it from sale. Under Google Play's terms of service, customers who buy apps that do not perform as stated are told to notify Google of the failure. "In the case of Android apps," says Google, "you should contact the developer." Google says it reserves the right to issue refunds or credits at its sole discretion.
Google did not respond to a request for comment from ABC News. ABC News attempted to contact Deviant Solutions but could find no current contact information for the company.
How could an apparently fraudulent app become a best-seller? Easily, say experts.
WillowTree Apps of Charlottesville, Va., has produced some 180 apps since 2007. CEO Tobias Dengel and Android developer Derek Brameyer told ABC News that Apple and Google, the leading sellers of apps, have dramatically different standards for vetting the apps they sell.
Apple's vetting process, they say, takes weeks. Google's can take 60 seconds.
"Apple and Google have markedly different philosophies," Dengel said. For an app to be accepted for sale by Apple, its developer has to comply with a 30-page list of Apple's requirements. "We've had apps rejected just because in one place we covered up the Apple logo with navigation. Theirs is an incredibly detailed review," he said.
Google has a different philosophy, Dengel and Brameyer said: An automated process scans the app to see if it harbors any malware. Beyond that, there's no further check, they said. Google, they and other experts confirmed, does not check to see that the app provides the function promised.
The upside to that laxness is that Google's app buyers have available to them all sorts of content that Apple would not approve, Brameyer said. For example, Apple will reject apps that in their opinion have too little content. Apple, he said, is famous for once having observed that "the world doesn't need another fart app."
The downside to Apple's more scrupulous approach, Dengel said, is that a legit app can be rejected on the basis of an arbitrary judgment.
WillowTree, for example, was commissioned by Virginia Tech to produce an app for use at college football games. A school tradition has it that when a "key play" is on the field, alumni shake the keys in their pocket. WillowTree's app produced the same jingling sound when sports fans shook their cell phones. Apple rejected the app, Dengel said, on the grounds it did not have sufficient functionality -- i.e., it needed to do more than just make a sound.
Further, "Apple has much longer cycle times," Dengel said. "If you need to make a change after an app has launched, it can take weeks to make the fix. With Google, you can make the fix immediately."
What steps can a consumer take to make sure the app he's buying is legit? Dengel and Brameyer suggest potential buyers read product review on such sites as Android Police. Other sites they recommend include Droid-Life, Mac Rumors, Android Central and Touch Arcade.