About stats apps and fake IG login

[MarkWilson]

So I recently read an article that said 99% of the apps that show specific stats of profiles (for example how many followers unfollowed, how many ghost followers an account has) are not approved by Instagram. That means they are not authorized to use official Instagram API. So basically these apps create a login that is exatly like the official Instagram login, but that's not actually Instagram! Sounds interesting to me. They are clearly collecting user and pass of people who use these apps. And some have over 1-5 MILLIONS downloads in the app store.
Look at this for example: reports+
This app says that they are not collecting any credential. But they are not approved by IG and they have a fake IG login.
How is it possible that this kind of app is still alive? (Please note that there are like hundreds of them)

 

[Aulig]

If they have a login screen, they could misuse the accounts yes. many work without a login though.

 

[Jessica Folley]

It's amazing this is still going on and on the app store isn't it! They are so very popular also, they must be on IG's radar.

 

[MarkWilson]

Isn't it illegal to make such fake login?

 

[Millstone]

Isn't it illegal to make such fake login?

All time before beginning of 2017 app store do not remove any application who used private IG api. EVEN like 4 like apps. But after Trump was elected and big story with FAKE NEWS apple changed they policy and remove all apps with likes and many apps who is used private api. By now it looks like IG can ask apple to remove any app used private api.

About legal or illegal its depends on country where u live. Looks like use private api isn't illigal but you need an private key which one hidded in intagram app. So you need to decompile app and take key. Decompilling is illegal in many countries.

The other way, this app can ask u to login in web version and catch your cookies and use web version for analytics. There is nothing illegal i think.

As i known there is no stories when anyone was arrested for using IG or FB private api. I known some usa company who build business on private api and like4like apps.

 

[Millstone]

I've checked this app. They show u fake instagram login form and try to login your in private mobile app api.

 

[MarkWilson]

I've checked this app. They show u fake instagram login form and try to login your in private mobile app api.

So making a fake login with the official Instagram logo isn't illegal?

 

[Millstone]

So making a fake login with the official Instagram logo isn't illegal?

What you mean with ''illegal"? I think it is depends on how you will use this login.

 

[red333]

So I recently read an article that said 99% of the apps that show specific stats of profiles (for example how many followers unfollowed, how many ghost followers an account has) are not approved by Instagram. That means they are not authorized to use official Instagram API. So basically these apps create a login that is exatly like the official Instagram login, but that's not actually Instagram! Sounds interesting to me. They are clearly collecting user and pass of people who use these apps. And some have over 1-5 MILLIONS downloads in the app store.
Look at this for example: reports+
This app says that they are not collecting any credential. But they are not approved by IG and they have a fake IG login.
How is it possible that this kind of app is still alive? (Please note that there are like hundreds of them)

I used multiple of these stats apps just to see how many likes I´ve made that year, many of these apps required a login and if I remember correctly reports+ did as well.
Long story short, the app couldn´t load the whole stats, because it seems like if you have like anything above 5m+ likes / yearly the stats are loading ages. Uninstalled all the apps, but haven´t had any password reset attempts and I don´t think that they try to collect and gain access to IG accounts ^^

 

[MarkWilson]

What you mean with ''illegal"? I think it is depends on how you will use this login.

It should be considered like fishing anyway.. I mean you are displaying a login that is EXATLY like the one of Instagram. So the user thinks he is logging in Instagram. But he is actually giving his credentials to you

 

[Millstone]

It should be considered like fishing anyway.. I mean you are displaying a login that is EXATLY like the one of Instagram. So the user thinks he is logging in Instagram. But he is actually giving his credentials to you

If you do not send his credentials to your server and user understand what app will make with his account it is not counting like fishing by apple as we see.

looks like there is no arbitrage practice for this case. Looks like fair use, users can do anything with they account, right?

 

[MarkWilson]

If you do not send his credentials to your server and user understand what app will make with his account it is not counting like fishing by apple as we see.

So lets say I make a website with a fake Instagram login, this website is about like exchange. I won't need to decompile the IG app as I will get the credentials from the login. Users will know that they will give their credentials in order to enter the like exchange system and they will accept terms before entering their credentials. This is safe?

 

[Millstone]

So lets say I make a website with a fake Instagram login, this website is about like exchange. I won't need to decompile the IG app as I will get the credentials from the login. Users will know that they will give their credentials in order to enter the like exchange system and they will accept terms before entering their credentials. This is safe?

There is no arbitrage practice for this case. But as I known no one like 4 like app have troubles with justice. One my friend have received strike from FB who asked to remove his app from app store. He hire advocate in usa and case end with nothing. FB does not start court process.