Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
Google mandates Android developer verification for app installs in Brazil, Indonesia, Singapore, and Thailand starting
Google will begin enforcing Android developer identity verification on September 30, 2026, in Brazil, Indonesia, Singapore, and Thailand. Certified Android devices in these countries will block installations of apps from developers who have not registered their identity with Google. This measure aims to combat malware and scams, particularly affecting open-source app distribution channels.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGoogle's enforcement of developer identity verification addresses a long-standing gap in mobile app supply chain trust — unverified developers have historically been a vector for distributing malware and scam applications through sideloading and unofficial channels. By requiring verified identity registration before September 30, 2026, Google is introducing an access control layer at the distribution level, ensuring accountability for app publishers. This matters because unverified app sources represent a significant attack surface, particularly in high-growth mobile markets like Brazil, Indonesia, Singapore, and Thailand. Organizations and consumers relying on open-source or third-party Android app channels must now audit their app sourcing practices to avoid operational disruption when enforcement begins.
What helps against this
How we list vendors
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.