163/69 Monday, March 23, 2026
Google has announced a new security feature called Advanced Flow for Android users who install applications from external sources (APK sideloading) or from unverified developers. This measure is designed to address the growing threat of cyber scams and malware. According to the Global Anti-Scam Alliance (GASA), global losses from scams exceeded $440 billion last year. The feature is expected to roll out gradually starting in August, aiming to balance Android’s openness with stronger protection against increasingly sophisticated threats.
The Advanced Flow mechanism introduces intentional friction to disrupt common social engineering tactics, where attackers pressure victims into quickly installing malicious apps. Users attempting to install APK files from unverified sources will be required to go through multiple verification steps, including enabling Developer Mode, completing a questionnaire to confirm they are not being coached or manipulated, restarting the device, and re-authenticating using a password or biometric verification. Most notably, users must wait 24 hours (Security Delay) before they can proceed with the installation. This delay is designed to give potential victims time to reconsider or seek assistance before being coerced into disabling device protections.
This update is part of Google’s broader Developer Verification policy, which requires all Android app publishers-regardless of distribution channel-to complete identity verification by August 2026, or their apps will be blocked from installation on Android devices. Even after completing the Advanced Flow process, users will continue to receive risk warnings before installation. This move represents a significant step forward in protecting Android users from social engineering-based attacks, which are becoming increasingly prevalent worldwide.