Installing a new program can feel routine, but one careless download can hand a criminal your passwords, files and bank details. Before you install anything, confirm that the software comes from the company that makes it—or from an official app store. That one pause is your best defense against malware disguised as a useful tool.
The scale of online crime shows why it matters. The FBI’s 2025 Internet Crime Report recorded 1,008,597 complaints and $20.877 billion in reported losses. That total covers internet crime broadly, not just malicious downloads, but it shows how much is at stake when you let an unverified program onto your device.
How can a software download be malware in disguise?
Criminals copy the look of trusted brands. They build fake download pages, buy search ads, post bogus links on social media and bundle spyware with “free” tools. Microsoft’s security researchers have tracked counterfeit software-download sites that impersonate trusted vendors to distribute malicious installers. The page looks right, the button works and the harm starts when you open the file.
What should you ask before you install any software?
Run through these three questions every time:
- How did I find this software? Did you search for it on purpose, or did a pop-up, ad, email or message find you? Unsolicited offers deserve suspicion.
- What does the program claim to do? Be wary of tools that promise to “cure” your computer, speed it up magically or remove viruses it says it just found.
- Do I actually need it, and what are others saying? Read recent reviews from independent sites. If you cannot find any, skip the download.
Where is it safe to download software?
Stick to the maker’s official website, which you reach by typing the address yourself, or to your device’s official app store, such as the Microsoft Store, Mac App Store, Google Play or Apple App Store. The FTC advises that you go to a software website by typing in the address instead of clicking an ad, and avoid unfamiliar sites for free downloads. Skip peer-to-peer file-sharing sites and cracked or “free” versions of paid programs, which often carry hidden malware.
How do you download software safely, step by step?
- Start with the source. Type the company’s web address or open the official app store. Do not click search ads or links in unexpected messages.
- Check the details. Look for the exact company name, a secure connection and a clear privacy policy. Watch for misspelled domains and extra words in the address.
- Read independent reviews. Search the program name with “review” and “scam” to see what other users report.
- Review permissions. Decline access to contacts, files, camera or microphone unless the program truly needs it.
- Scan before you open. Let your security software check the file. Never turn off protection because an installer tells you to.
- Keep it updated. Turn on automatic updates so security patches arrive without effort, and delete programs you no longer use.
What should you do if you already installed something suspicious?
Act fast. Disconnect from the internet, then run a full scan with trusted security software. Uninstall the program, and from a different clean device, change your passwords, starting with your email and bank. Turn on multifactor authentication and watch your accounts for unfamiliar activity. If you entered payment details, call your card issuer using the number on your card.
Make safe downloading a habit
Choosing reputable sources keeps your passwords, photos and financial details out of criminals’ hands. It also means fewer unknown programs running on your device, fewer surprise pop-ups and a much smaller target for attackers. Before your next install, ask the three questions above, then share this checklist with a friend or family member who loves free downloads.
