Is Fermata Auto Safe? How to Avoid Fake Download Sites
Whenever a free app becomes popular, clones appear. Fermata Auto is no exception. Search for it and you will find official pages mixed with sites that look professional but exist for one reason: to collect money, clicks or installs from people who do not know better. This article explains how to tell the difference and what to do if you already downloaded something suspicious.
First, the facts
- Fermata is completely free and open source under GPL-3.0.
- There is no paid edition and no subscription.
- The only official sources are fermataauto.org and the project's repository at github.com/AndreyPavlenko/Fermata.
- Websites such as fermata-auto.com are scams and are not run by the developer.
Why fake Fermata sites exist
Open-source apps are easy to copy. Anyone can take the public APK, wrap it in a slick page, and then make money in one of several ways:
- Selling "licences" or "premium" access for an app that is free.
- Ad and survey funnels that make you click through pages before a download button appears.
- Repackaging the APK with extra code, such as adware or trackers.
- Collecting email addresses and payment details through fake sign-up forms.
You do not need to be unlucky to be caught; the ranking of these pages in search results is often deceptively high.
Eight warning signs of a fake page
- It asks for money. Anything labelled "Pro", "Premium", "Lifetime" or "Activation" is not Fermata.
- It asks you to register or enter a card to "verify your age" or "unlock" the download.
- The download is not an .apk but an .exe, .zip, .msi or a "downloader" tool.
- It wants a survey, notification permission or app install first.
- The file size is wildly different from the release listed on GitHub. A 2 MB "installer" for a 150 MB app is a red flag.
- The domain looks almost right but has hyphens, extra words or a strange extension.
- There are fake testimonials, countdown timers or "only 3 downloads left" messages. A free open-source app never runs out.
- There is no link to the source code. Real open-source projects point at their repository.
How to verify the real file
You can do a few quick checks in under a minute.
- Compare names. Official files look like
fermata-auto-2.0.2-arm64.apk. Releases and their file sizes are listed on our download page and on the GitHub releases page. - Compare sizes. Version 2.0.2 arm64 is about 152.6 MB. A tiny file is not the same app.
- Check what Android says. When you open the APK, Android shows the permissions it asks for. A media player has no reason to want your SMS or contacts.
- Use Play Protect. In the Google Play Store app, open the profile menu, go to Play Protect and scan your apps.
- Scan the file. A multi-engine scanner such as VirusTotal can check a file you already downloaded. Treat the result as a clue, not a guarantee, because open-source apps with accessibility features can sometimes be flagged wrongly.
What if I already installed a fake?
- Uninstall the app from Settings > Apps.
- Run a Play Protect scan.
- Check Settings > Apps > Special access for anything you did not grant, especially Accessibility and Install unknown apps, and turn off what you do not recognise.
- If you entered payment details anywhere, contact your bank and ask about blocking or reversing the charge.
- Change passwords for any account you typed into the page.
A note about sideloading in general
Fermata's Android Auto build is installed outside the Play Store. That means you are the gatekeeper. Google does not vet sideloaded apps, and they can stop working after an Android or Android Auto update. Install only from the official sources, keep your phone updated, and switch off Unknown sources in Android Auto when you are not testing something. Using the app is also a responsibility on the road: watch video only while parked.
Report a fake site
If you spot a page pretending to be Fermata, you can report it to Google Safe Browsing and to the hosting provider. Reporting helps protect the next person who searches for the app.
Frequently asked questions
Is Fermata Auto a virus?
No. Fermata is open-source software with public code on GitHub. The danger comes from fake copies, so download only from fermataauto.org or the official GitHub releases.
Is fermata-auto.com legitimate?
No. fermata-auto.com is a scam site and is not run by the developer.
Does Fermata cost money?
No. It is free. Anyone asking for payment for Fermata is not the developer.