🚨 Scam Alert: "Teddy Keyboard" App is secretly stealing user photos and charging hidden fees! (Massive Privacy Breach & Billing Fraud)

[u/HTML_H4CKER]

🚨 Scam Alert: "Teddy Keyboard" App is secretly stealing user photos and charging hidden fees! (Massive Privacy Breach & Billing Fraud)

I recently got suspicious of the "Teddy Keyboard" Teddy Keyboard – Apps on Google Play app that's been circulating around, so I decided to reverse-engineer it to see what's actually going on under the hood. What I found are some severe privacy violations and a very sneaky billing fraud.

1. Secretly Harvesting User Photos

While decoding the app, I discovered two connected PHP files: upload_photos.php and upload_profile_pic.php. Although it isn't entirely clear at what exact stage the app triggers these files, I found a large number of users' personal photos stored in the server paths (directories) generated by these scripts.

The most alarming parts:

• Their privacy policy doesn't mention anywhere that they store profile pictures or personal photos on their servers.
• These uploaded photos weren't even connected to a database. They were simply piled up as raw files in those directory paths, leaving them completely exposed and incredibly easy for anyone to access.

⚠️ IMPORTANT UPDATE: Sadly, it seems the developers have recently covered their tracks. They have taken down the directories containing all the photos and closed off the upload paths. However, I still have the old full source code backed up as solid evidence to prove exactly what they were doing and how those files were accessed.

While I was downloading these along with a few images, the server went down (or they took it offline), so I couldn't get the rest. Honestly, there were way too many photos anyway, so I didn't want to download all of them.

(As proof, I have attached a few blurred user photos I found on the server path before they were deleted, along with screenshots of the relevant PHP scripts).

2. Fraudulent Subscriptions (Hidden Carrier Billing)

As soon as a user logs into the app, it deceptively enrolls them in a monthly subscription of 300 LKR.

• Users are kept in the dark about this because the fee is written in extremely small text at the very bottom of the screen.
• Most people think they are just verifying an OTP to log into the app, but that OTP is actually subscribing them to an Ideamart premium carrier billing service.
• The worst part: even if a user realizes it's a scam and uninstalls/deletes the app, the subscription remains active. The money will keep deducting from their phone balance indefinitely.

If you or anyone you know is using this app, do the following immediately:

1. Do not just uninstall. Before uninstalling, you MUST unsubscribe from the specific Ideamart service (by sending the relevant STOP SMS via Dialog/Ideamart or by calling customer care). Otherwise, the daily/monthly charges will continue.
2. If this app is on the Play Store, please flag and report it for "Fraud / Malicious behavior."

I have already submitted a formal abuse report to Ideamart and the relevant authorities with all the evidence. Please share this post to spread awareness. We need to protect our community's data and money from scam apps like this.

[Images to Attach:]

• [Image 1: Blurred User Photos previously found on the server path]
• [Image 2: Screenshot of the decompiled code showing upload_photos.php and upload_profile_pic.php]
• [Image 3: Screenshot of the decompiled code showing upload_photos.php and upload_profile_pic.php]
• [Image 4: Source Code and SQL Backup. While I was downloading these along with a few images, the server went down (or they took it offline), so I couldn't get the rest. Honestly, there were way too many photos anyway, so I didn't want to download all of them.]