Android Tightens Sideloading With Developer Verification ‘Accountability Layer’

Google is preparing an Android change that adds an “Accountability Layer” to sideloaded (third‑party) apps, introducing a higher-friction installation flow intended to make users acknowledge the risks rather than banning sideloading outright. Google’s Matthew Forsythe said advanced users will still be able to proceed via an Install without verifying option, while Android’s developer verification requirements are being expanded, including a new account type aimed at students and hobbyists that can distribute apps with limited reach without completing full verification.

The move aligns with continued growth in Android malware distributed via sideloaded APKs, which threat researchers report remains a primary infection vector despite protections like Google Play Protect. Kaspersky reported preliminary 2025 data showing Android threat detections rising by nearly half, with Q3 detections up 38% versus Q2 and sharp growth in trojan banker activity; attackers commonly deliver malicious APKs through messaging apps (often using deceptive filenames like party_pics.jpg.apk) and then propagate further via victims’ contact lists, with search-engine spam and email lures also used to drive installs outside official app stores.