A malicious Android application is currently masquerading as Bahrain’s official “BH Alert” emergency service. Instead of sending civil defense updates, this fraudulent app silently steals your text messages, one-time passwords (OTPs), and banking credentials. If you live in Manama or anywhere in Bahrain, you need to check your phone right now.
Living and working in Bahrain, we are trained to trust digital government services—they are efficient and make daily life seamless. Cybercriminals know this. A recent investigation by the cybersecurity firm Dream revealed that hackers are specifically exploiting our trust in the Bahraini government to commit massive financial fraud.
How the Scam Actually Works (The Social Engineering Trick)
Hackers aren’t using sophisticated software to break into your phone; they are politely asking you to open the front door.
Just last week, a neighbor in my Manama expat community group shared a highly convincing “urgent government update” link. This is exactly the trap. Cybercriminals are building fake government websites that look completely legitimate. They slap on official branding, fabricate thousands of positive reviews, and add fake verification badges.
Once you download the app from their link rather than the official store, it requests terrifying permissions. It wants to read your texts, view your contacts, take screenshots, and monitor your screen. According to security experts, they don’t have to hack your bank; they just wait for you to log in and steal your two-factor authentication codes right off the screen.
Spot the Fake: Genuine App vs. Scam Software
Before you download any government tool, compare these critical red flags.
| Feature | The Official BH Alert App | The Fake Malware App |
| Where it lives | Only found on the official Google Play Store or Apple App Store. | Pushed through SMS links, WhatsApp, or fake third-party websites. |
| Permissions asked | Standard notification access and basic location data. | Demands access to SMS, OTPs, screen recording, and contact lists. |
| The ultimate goal | Keeping Bahrain residents safe during civil emergencies. | Harvesting credentials for identity theft and financial fraud. |
What to Do If You Already Downloaded It (My Quick Fixes)
If you suspect you’ve installed this fake Bahrain alert app, time is your biggest enemy. Do not wait for your bank to call you. Take these steps immediately:
- Sever the connection: Turn on Airplane Mode immediately. This stops the app from sending your stolen passwords back to the hackers’ servers.
- Scrub the device: Go into your Android settings, find the suspicious app, force stop it, and delete it completely.
- Change your critical locks: Use a separate, safe device (like your laptop) to change your banking passwords and email passwords.
- Report the breach: Contact your bank immediately and alert them to monitor for suspicious transactions. You can also verify official digital services through Bahrain’s official eGovernment Portal.
The golden rule of app safety in the Gulf: Never download a government application from a link sent to you in a message. Always navigate directly to the official app store yourself. Fear is a hacker’s best tool—pause, verify, and protect your digital life.
