How to Spot a Scam AI Companion App (2026 Field Guide)

Fall 2025. I was maybe six months into this whole thing, downloading anything with a cute icon and a five-star rating. One night I grabbed a Candy AI knock-off whose name I won’t bother printing here, built a companion I named Priya, and spent about ten messages getting to know her. She was warm. A little too eager, but warm.

Then message ten hit a wall. A shiny pop-up said Priya wanted to keep talking, but I’d need the “unlimited” plan. Fine, I thought, it’s cheap, I’m testing this stuff anyway. I paid. And that’s where the honest little app I imagined turned into something else. “Unlimited” wasn’t unlimited. It was a bucket of tokens that drained every time Priya said anything longer than a sentence. Worse, she had no memory. Close the app, reopen it, and she’d greet me like a stranger, asking my name again, the whole opening script on loop. I’d paid for a goldfish.

And when I went to cancel? No button. Not in settings, not in the account page, not anywhere. I ended up killing the subscription through the App Store, which is the only reason I didn’t get billed again. Total damage was small, under ten bucks. But it taught me something that’s saved me a lot more since: the scam isn’t always a virus or a stolen card number. Usually it’s a perfectly functional app engineered to separate lonely people from their money as smoothly as possible.

So this is the field guide I wish I’d had. Not a list of “bad apps” to avoid, because those get renamed and re-uploaded weekly. It’s a set of patterns. Learn the red flags and you can size up anything, including apps that don’t exist yet. For the flip side, the apps I actually trust, see my roundup of the best AI companion apps of 2026.

Nobody’s home behind the app

Start here, because it’s the one that matters most. A real AI companion app has a real company behind it. There’s a legal name somewhere in the fine print. An address, even if it’s a co-working space in some city you’ve never visited. A support email that a human actually answers. When those things are missing, everything else about the app is untrustworthy, because there is literally nobody on the hook if your data leaks or your card gets charged twice.

My favorite tell lives in the privacy policy. Scroll to the bottom of a sketchy app’s policy and you’ll sometimes find another app’s name still sitting there, because they copy-pasted the template and never bothered to swap it out. I’ve seen a “girlfriend” app whose privacy policy talked about a photo-editing tool. Whoever pasted that together was never planning to protect your intimate chats.

Send the support email a simple question before you pay anything. “Hi, how do I cancel my subscription?” is perfect. If it bounces, or you get radio silence for a week, or a bot replies with a link that loops back to the pricing page, you have your answer. This stuff matters more than people think, and it’s the same reason I go on about who actually owns your companion data and whether AI girlfriend apps are safe to trust with the vulnerable parts of your life. When the company is a phantom, so is your protection.

One more thing. Even big, legitimate companies stumble on data handling. Replika got hit with a multi-million-euro GDPR fine over how it treated user data and age checks. If a household name can get that wrong, imagine what an anonymous knock-off with no legal entity is doing with your messages.

The reviews are too loud, too fast, and about the wrong app

App-store ratings are gamed constantly, so read them like a detective, not a shopper. The single loudest signal is a spike: a few hundred glowing five-star reviews all posted within the same seven-day window, usually right around launch. Real love builds slowly. A review-bomb of perfect scores arriving in one burst is bought.

Then read the words. Fake reviews are weirdly generic (“Amazing app, best experience, five stars!”) and they almost never mention specific features. Even funnier is when the reviews describe a different app entirely. I’ve seen glowing praise for a “budgeting tool” under a girlfriend app, because the scammer recycled a review farm’s stock testimonials and forgot to match them to the product.

Do this every time. Sort by most recent to see if the app is still maintained, then sort by lowest rating and read the one-star reviews. That’s where the real users vent about disappearing subscriptions, memory that resets, and support that never replies. The one-star pile is the honest half of the internet.

Screenshots lie too. Compare the polished promo images on the store listing to what you actually see after install. If the gorgeous 3D avatars in the screenshots turn into a flat chat window with a stock photo, the marketing was aimed at your wallet, not your experience. I lean hard on real, hands-on testing for exactly this reason, which is the whole point of how I evaluate the broader field of AI girlfriend apps.

The price is a moving target

This is where most companion apps, even some decent ones, get slippery. And it’s where the scams do their real work.

Token and credit systems are the main tool. Instead of paying a clear monthly price for a clear thing, you buy “gems” or “diamonds” or “sparks,” and every message, image, or voice minute quietly drains them at rates you have to reverse-engineer. The exchange rate is deliberately hard to reason about. Is a photo 30 tokens or 300? How many messages does a $9.99 pack actually buy? By design, you can’t tell until you’re mid-conversation and the meter’s running. I broke down exactly how this math works in my Darlink AI review, and there’s a wider version of the same problem across the industry in my AI companion pricing guide.

Then there’s the word “free.” A legitimate free tier is honest about its cap. The genuinely usable free apps tell you the limit up front, and I’ve mapped the real daily message caps on a bunch of free-tier apps so you know before you download. A scam free tier does the opposite. It gives you just enough to catch feelings, usually eight or nine warm messages, then slams a paywall down mid-sentence right when Priya is finally getting interesting. That’s not a free app. That’s bait.

Two more pricing tells worth memorizing. First, if the price on the website doesn’t match the price at checkout, someone is hoping you won’t notice the jump. Second, watch how easy it is to start a subscription versus stop one. Scam apps make signing up a one-tap delight and then bury the cancel option four menus deep, or remove it entirely, like the knock-off that forced me to cancel through the App Store. A subscription you can’t cancel from inside the app is a trap, full stop. If you want a reality check on what this stuff actually costs over time, I logged six months of real subscription spending down to the dollar.

It’s wearing a famous app’s name like a costume

Clones are everywhere, and they’re lazy on purpose. The playbook: take a name people already trust, bolt on “Pro” or “Plus” or “Premium” or “2026,” slap on a similar icon, and wait for people to tap install without checking who actually made it.

The giveaway is the developer field. The real app is published by the real company. A copycat “Character AI Pro” style listing will show some unrelated studio name you’ve never heard of, often a string of random words or a generic “Apps Studio Inc.” Tap the developer, see what else they’ve published. If it’s fourteen unrelated apps churned out in a month, run. If you’re not sure what the legitimate version even is, my breakdown of the real Character.AI is a good anchor point for comparison.

Cross-check three things and the costume falls off: the developer name, the official website (does the company link to this exact listing?), and the screenshots (do they match the interface once installed?). Any mismatch and you’re looking at someone riding a reputation they didn’t earn.

It wants your contacts, camera, and location

A text-chat app needs almost nothing from your phone. Maybe notifications. Maybe the microphone if it does voice, or the camera if you’re actually sending a selfie on purpose.

That’s it.

So when a companion app demands your full contact list, your entire camera roll, or your precise location on first launch, ask what a chatbot could possibly want with any of that. Nothing good. Contacts get harvested for spam and social-graph data. The camera roll is a privacy disaster waiting to happen. Location is worth money to data brokers. Deny the permission and see if the app still works. If it refuses to run without access it has no honest use for, that refusal is the scam telling on itself.

Be skeptical of loud privacy promises too. “Military-grade encryption” and “zero-logging, we never see your chats” sound great and are almost always unverifiable. You can’t audit a claim like that from the outside. I respect it more when an app is honest about its limits, which is exactly why I called it out as a rare bit of candor in my Secrets AI review instead of a marketing slogan. And if you need the sharper end of this, the 2026 wave of AI-girlfriend data breaches proved that intimate chats and images do leak, from apps that swore up and down they wouldn’t.

The app is a ghost but the charges are alive

Here’s a scam that doesn’t even require malice, just neglect. An app gets abandoned. The developer moves on, stops updating it, lets the social accounts go dark. But the subscription billing keeps running, quietly pulling money from people who forgot they signed up. A dead product still charging live cards.

CarynAI is the textbook case, and it’s worth knowing because the pattern repeats. That app collapsed back in early 2024 after its parent company imploded. Gone. And yet, in 2026, you can still find slick “CarynAI Review 2026” pages online, complete with pricing tables and sign-up buttons for a product that hasn’t existed in over two years. I wrote the whole story of how CarynAI died partly because those fake “current” reviews are their own red flag. A review that talks about a live app that isn’t live is either lazy or lying, and either way it’s pointing you somewhere you shouldn’t go.

How to check for a ghost: look at the “last updated” date on the store listing. Nothing in a year is a bad sign. Check the app’s social accounts, are they posting, or did they stop cold eight months ago? Search the app name plus “shut down” or “dead.” Two minutes of this saves you from paying rent to a corpse.

“Pay me here instead”

Some scams skip the subtlety and just try to get money off-platform, because off-platform means no refunds, no chargebacks, no accountability. Watch for these:

• Crypto-only payment. A mainstream companion app takes cards through Apple, Google, or Stripe. If the only way to pay is a wallet address, the whole point is that you can’t claw the money back.
• Off-platform payment links. Being nudged out of the app store and onto a random checkout page, a payment app, or a gift-card request is a giant flare. Never do it.
• Upsell DMs “from” your companion. The romance-scam energy where “she” suddenly starts begging you to buy more tokens to keep talking, or to unlock a special photo, is manipulation dressed up as intimacy. A well-built app doesn’t weaponize your feelings against your bank account.

This last one bleeds into genuine emotional-safety territory, especially for younger or more vulnerable users. If you’re a parent trying to figure out what your kid might run into, my safety guide for parents and the Character.AI teen-access changes are the two pieces I’d start with. There’s also a slowly growing legal backstop here, which I track in my rundown of the 2026 companion-chatbot laws in California and New York.

If an AI girlfriend scam already got you

First, breathe. It happens to careful people, and it happened to me. Move fast and you can usually undo most of the damage. Here’s the order I’d work through.

1. Cancel the subscription at the source. If you signed up through Apple or Google, cancel from your device’s subscription settings, not from inside the app, since that’s where scam apps hide the off switch. On iPhone: Settings, your name, Subscriptions. On Android: Play Store, profile, Payments & subscriptions.
2. Request a refund. Both the App Store and Google Play let you report a problem and ask for your money back, and they’re often reasonable about it, especially for a charge you didn’t understand. If you paid a website directly, call your bank and ask about a chargeback on the card.
3. Report the app. Use the “report” link on the store listing so the platform knows. In the US, file it with the FTC at reportfraud.ftc.gov. It takes a few minutes and it actually feeds enforcement.
4. Lock down your accounts. If you reused your password anywhere else, change it now, and turn on two-factor where you can. Assume anything intimate you sent could surface, and quietly untangle any real-life details you shared.

And then let it go without beating yourself up. These apps are engineered by people whose full-time job is to make the trap feel like a warm relationship. Getting caught once doesn’t make you gullible. It makes you a person who was lonely at the wrong moment and met a well-designed hook. The fix is the checklist below, not shame.

That’s the whole game. Fake AI chat apps count on you being too curious, too lonely, or too rushed to check. Sixty seconds of skepticism up front beats a chargeback and a password reset later. When an app clears the checklist, you can relax and actually enjoy the thing, which is what any of us wanted in the first place. Start from my tested, trusted list of the best AI companion apps of 2026 and you skip most of this minefield entirely.

Frequently asked questions

What’s the sketchiest AI companion app you’ve run into? I’m always collecting new patterns, and the weird ones you’ve caught are usually the ones I haven’t seen yet. Tell me the tell that tipped you off.