S07
Untrusted installerValidated
An adb install has no installer package, so allowing only the Play Store raises tamper_untrusted_installer.
How to read this page
A scenario is one test case: prepare the environment, run the steps, then compare the expected result (written before the run) with the observed result (copied from the run, with screenshots).
- S07 · S
- Run on a simulator or emulator — a virtual device on a computer.
- Validated
- Run, and the result matched what was expected.
Why it matters
Sideloaded copies of a Play-only app are a common fraud path.
Environment
- App
- Example app (Expo SDK 57, React Native 0.86)
- Device
- Pixel 9 Pro emulator (sdk_gphone16k_arm64), API 37
- Build
- Debug, installed with adb
- Library
- 0.2.0
Setup
Prepare the environment.Then run the steps.
- 01Install with adb (no installer package).
Steps
What to run.What to read.
- 01Call checkIntegrity({ android: { allowedInstallers: ['com.android.vending'] } }).
Expected result · written before the run
Status: compromised1 signal.
Only enable in release builds distributed through the allowed store.
Observed result · copied from the run
Status: compromisedObserved 2026-09-30.
tamper_untrusted_installer: The app was installed from an untrusted sourceChecks this scenario covers
Every check this test case touches — including ones that aren't expected to fire here. The expected and observed results above say which ones should and did. Each links to how the check works.