During installation, if the app asks for unusual permissions (like access to your SMS, contacts, or camera when it shouldn't need them), cancel the installation immediately. 3. Use Official Stores

Upload the APK file to VirusTotal to scan it against dozens of antivirus engines.

If the app isn't on a store, go directly to the creator's verified website. 4. Enabling "Unknown Sources"