Skip to main content

Apple’s still not catching scammy apps, and this time they’re on the Mac

Apple’s still not catching scammy apps, and this time they’re on the Mac

/

These apps won’t let you quit them unless you pay up or figure out their tricks

Share this story

Illustration by Alex Castro / The Verge

Scam app hunter / developer Kosta Eleftheriou, known for catching egregious scams that make it past Apple’s review process, has once again brought attention to a new crop of shady apps being peddled through the App Store. This time they’re on the Mac, and they’re using pop-ups that make it extremely difficult to quit an app without agreeing to outrageous subscription prices — all without Apple noticing, despite its argument that its App Review process keeps devices and users safe.

The app that started the hunt, which seems to have been discovered by Edoardo Vacchi, is called My Metronome. According to Vacchi, Eleftheriou, and user reviews, the app locks up and won’t let you quit it using keyboard shortcuts or the menu bar until you agree to a $9.99-a-month subscription. (It can, however, be force quit.) Eleftheriou told The Verge that it “seems like this developer has experimented with various techniques over the years of preventing people from closing the paywall,” pointing us to several other apps that are still on the store with similar behavior — we’ll get to those in a moment.

Sometime after Eleftheriou tweeted about My Metronome, the app was seemingly removed from the store. Trying to open the link pops up with a message saying that it’s no longer available in my region. (Though, to be clear, you probably shouldn't try to download it or any of the apps we’re about to talk about.) Apple didn’t respond to The Verge’s request for comment about whether it was the one to take the app down, or how it passed App Review in the first place.

The story doesn’t end there though. As developer Jeff Johnson discovered, the company that made the metronome app, Music Paradise, LLC, has a connection to another App Store developer, Groove Vibes. The privacy policies listed on both developers’ websites (which are linked on their App Store pages) say they’re registered at the same address, and both mention the same legal entity, Akadem GmbH.

The Verge decided to test these apps ourselves, so we fired up the Mac App Store and downloaded Music Paradise’s other app, Music Paradise Player, along with Groove Vibes’ entire catalogue of Mac apps. All of them had an immediate pop-up asking for money in the form of a recurring subscription (usually around the $10-a-month price point, give or take a few bucks). Three of Groove Vibes’ apps worked appropriately — you could quit them with the menu bar, or by pressing Command+Q.

However, two apps from the developer, along with Music Paradise Player, greyed out the quit option on the menu bar, and don’t let you press the standard red close button. Keyboard shortcuts were no help either; they stayed open even while I spammed Command+Q, Command+W, and the escape button.

An app should not be able to do this as soon as you open it.
An app should not be able to do this as soon as you open it.

The apps don’t totally lock you out of your computer like the ransomware that often makes the news, as there are other ways to close them even if you don’t know how to force quit. Music Paradise Player has an “X” button on its offer screen, and once you press it the subscription screen goes away and you can quit the app normally. FX Tool Box has a small “Maybe Later” button that does the same thing. All To MP3 Convertor has a similar “just let me into the app so I can close it” button, but it is by far the worst offender when it comes to hiding it. It’s a piece of text that says “continue with the limited edition,” nestled between other pieces of text, without any obvious sign that it’s actually a link.

The button that lets you quit All To MP3 Convertor is about as non-obvious as possible without literally being invisible.
The button that lets you quit All To MP3 Convertor is about as non-obvious as possible without literally being invisible.

But the fact that a savvy user could close these apps, if need be, doesn’t excuse their existence on the store. In theory, App Review should’ve tried them out and rejected them for violating Apple’s guidelines. It’s frustrating to see these apps slip through Apple’s net when there are plenty of other examples where developers get dinged for seemingly arbitrary reasons (or even just for following Apple’s example).

But Apple has let plenty of other scammy apps that flagrantly break its rules slip through the cracks. Eleftheriou previously discovered an iPhone app that won’t work unless you give it a good review, as well as games for kids that turned into actual gambling apps when opened from a certain country. The company has updated its policies in an attempt to make building scammy apps less appealing, but it’s falling down on actually enforcing those rules.

At the same time, Apple continues to argue that iPhone owners should only be able to install apps from its store, so it can scrutinize the software. The company vehemently opposes legislation that would force it to allow sideloading, or installing apps from other sources, saying that the lack of an App Store monopoly would subject users to all sorts of scams and malware. (When we checked last year, the App Review team only had 500 people, who are charged with the Herculean task of making sure that every app on the store follows the rules.)

There is a way to let Apple know about misbehaving apps. Last year, Apple added a “Report a Problem” button to the App Store on both iOS and macOS, which shows up near the bottom of the page after you’ve downloaded an app.

Correction April 16th 1:14PM ET: The original version of this article incorrectly stated that the report button wasn’t available in the Mac App Store. The report button is available in macOS, but only appears after you’ve downloaded an app. We regret the error.

Today’s Storystream

Feed refreshed 28 minutes ago Alexa is better with buttons.

D
David Pierce28 minutes ago
Today on The Vergecast: GTA, TikTok, and iPhones.

We tried to figure out what’s next for Grand Theft Auto after a huge leak, whether TikTok is the future of Google, and why Apple won’t just make a camera. It’s a fun Vergecast, available wherever podcasts are sold!


A
The Verge
Alex Cranz42 minutes ago
I regret to inform you that the phone is not good for cloud gaming.

Logitech announced the G Cloud Gaming Handheld earlier today. The new device comes with apps for some of the biggest cloud gaming services pre-installed, and you may be wondering what the point of it is when we all have very powerful phones with great screens. Don’t worry, I answered this question months ago when I wrote about just how bad phones are for serious cloud gaming! I cannot wait until we can run this thing through its paces and see if it gives us the cloud gaming hardware we need.


A
External Link
Adi Robertson46 minutes ago
I need to see Deathloop’s new, longer ending.

Deathloop’s perfunctory endings were a weak spot in a game full of great ideas, so I’m intrigued to hear that on top of new weapons and trinkets, the Goldenloop update contains an enigmatic “extended ending.” I’m not sure what that means, but it’s enough to make me consider booting the game up again. Besides, I could murder Aleksis much more elegantly this time.


D
External Link
Dan SeifertAn hour ago
Here come the Dynamic Island clones.

It’s no secret that once Apple does something, the industry tends to follow, so it’s not much of a surprise that we’re already seeing Dynamic Island clones materialize. Last week we saw MIUI (the Android-based software on Xiaomi phones) themers incorporate Dynamic Island-like ideas into their software, and today 9to5Google reports that Redmi is asking its fans to come up with ideas for what a “Redmi Island” could look like. Apparently Redmi wants to use to display alerts like incoming calls, notifications, and more.
Sure sounds familiar.


A
External Link
Andrew J. HawkinsTwo hours ago
Tesla is buzzing with robot fever.

Elon Musk’s company is getting ready to debut its supposedly not-fake humanoid robot, Optimus, during its “AI Day” event September 30th. What evidence do we have that it won’t just be another a person in a spandex robot costume doing an extremely awkward dance? There have been meetings! And job postings! And Elon tweeted that there may be a working prototype! Look, this will either be a major breakthrough in the field of robotics or a spectacular flop. But considering Musk has already solved the problem of self-driving cars, I’m inclined to— what’s that? [touches earpiece] I’m being told he hasn’t solved the problem of self-driving cars? And that humanoid robots could prove even more difficult? Oh well, then bring on the spandex dancers I guess.


Welcome to the new Verge

Revolutionizing the media with blog posts

Nilay PatelSep 13
N
Twitter
Nilay PatelTwo hours ago
I cannot stop laughing at Trombone Champ.

You have to watch this video, and PC Gamer’s writeup is also great.

Accuracy and timing determine how well you play, with little words popping up to tell you how you’re doing. Words like Perfecto! Or Nice! If you’re sucking, as I typically do, you’ll get a Meh or sometimes a Nasty, which is maybe the funniest word to use to describe someone playing a trombone poorly.


J
Twitter
Jay PetersTwo hours ago
A lot of people are playing Cyberpunk 2077 right now.

The game has had 1 million players, “both new and returning,” each day this week, according to developer CD Projekt Red. Interest is likely up due to a big new update and the well-received Netflix anime.


S
External Link
Sarah JeongTwo hours ago
Is it just me or are right-wing extremists a little too into Tolkien?

The obvious example is Peter Thiel naming his surveillance company Palantir (after an unspeakably evil scrying artifact that irreversibly corrupts its users?) but once you notice one profile of an alt-right or extremist figure mentioning how much they love Lord of the Rings, you start seeing it everywhere — including the footnotes of specious lawsuits attempting to undermine the 2020 election.

Anyways, you should read this, about an ascendant hard-right politician in Italy, whose politics are intertwined with high fantasy fandom in a way that will be unsettling to nerds of good conscience. And if you want to read more about Italy’s neo-fascist Camp Hobbit youth rallies in the 1970s, Atlas Obscura has you covered.


R
External Link
Russell BrandomTwo hours ago
Republicans are not wild about antitrust enforcement.

The US government’s two biggest antitrust regulators — FTC chair Lina Khan and Justice Department antitrust chief Jonathan Kanter — appeared for a Senate Oversight hearing on Tuesday, and there were two quick takeaways:

1) Republicans still are eager to notch some kind of win against Khan and the Democratic FTC majority

2) They don’t really know how to do it yet.

Expect a lot of fireworks here if Republicans take back the Senate majority in November.


J
External Link
Jacob Kastrenakes1:54 PM UTC
The Elon attrition is real.

“Hundreds of Twitter employees have fled since June,” according to Insider’s sources. That’s just over a month after Twitter agreed to sell the company to Musk — or, about as long as it’d take a highly qualified engineer to find a new job.

The company is down about 700 employees, according to the report, with many citing Musk and the acquisition as the reason why.


J
Youtube
Jon Porter1:24 PM UTC
The PS VR2 has a new trailer, but no release date.

Maybe I’m just old fashioned, but it feels weird to release a slick trailer like this for a product without an official release date? Regardless, the ad offers a pretty nice summary of the headset’s key features, which you can also read about in our recent hands-on preview. The PS VR2 is currently scheduled for release in “early 2023.


N
Nilay Patel1:09 PM UTC
Here’s 3.5 hours of me and John Gruber talking about the iPhone 14.

Going on The Talk Show to dive deep on our iPhone reviews has become one of my favorite yearly traditions. A little bit of Apple Watch Ultra conversation in there too — and yes, I asked John what he thought of our redesign fonts.


D
External Link
David Pierce1:00 PM UTC
YouTube’s former business chief will be Warner Music’s next CEO,

according to The Wall Street Journal. It’s a totally fascinating match: YouTube has always seen itself as a music service, even though nobody else really sees it that way, and talks a lot about how much it pays labels and artists. Warner needs to figure out how to get more money out of YouTube — and TikTok, and Fortnite, and the other platforms. Robert Kyncl’s going to be trying to improve the deals Robert Kyncl helped broker!