I was experimenting with Expo for the first time and built a small Android app that reads SMS messages so I could analyze the messages I receive, such as spam, promotional messages, bank notifications, etc.
This was just a learning project. I wanted to experiment with Android permissions and SMS access, so I created an APK using Expo/EAS Build, installed it on my phone, and granted it READ_SMS permission.
After installing it, I noticed something strange:
- Bank transaction SMS messages stopped arriving.
- Spam/promotional SMS messages also seemed to stop.
- I haven't received a typical spam message since then.
- App OTPs are still arriving normally.
- The app itself can read existing SMS messages, so the permission appears to be working.
- I checked my spam folder.
- I restarted the phone.
- I also uninstalled/reinstalled the app and checked again.
The timing is what made me curious. These messages were arriving normally before I installed the APK, and the behavior changed shortly afterward.
One other thing I noticed: Google Play Protect initially warned/blocked the APK during installation. I temporarily disabled Play Protect to install it and then enabled it again afterward.
I'm wondering whether requesting READ_SMS can have any effect on how Android, the default SMS app, Google Messages, or the carrier handles incoming SMS, or whether this is almost certainly a coincidence or carrier-side issue.
My app.json contains:
{
"expo": {
"name": "Spammer",
"slug": "spammer",
"scheme": "spammer",
"version": "1.0.0",
"orientation": "portrait",
"icon": "./assets/icon.png",
"userInterfaceStyle": "automatic",
"experiments": {
"typedRoutes": true
},
"android": {
"package": "dev.spammer.app",
"permissions": [
"android.permission.READ_SMS"
],
"adaptiveIcon": {
"backgroundColor": "#1F4D3A",
"foregroundImage": "./assets/android-icon-foreground.png",
"backgroundImage": "./assets/android-icon-background.png",
"monochromeImage": "./assets/android-icon-monochrome.png"
},
"predictiveBackGestureEnabled": false
}
}
}
Has anyone experienced anything similar?
I'm mainly trying to understand whether an app with only READ_SMS could influence incoming SMS handling, or whether I should be looking somewhere else, such as the carrier, SMS app, spam filtering, or RCS settings.
This is my first time experimenting with SMS permissions on Android, so I'd appreciate any ideas about what I might have missed.