More than 60 apps on the Brazilian App Store flip from legitimate utilities into online betting platforms the moment a user accesses them from a Brazilian IP address. The apps pass Apple’s review by displaying innocent functionality, weather data, simple games, navigation tools, to reviewers outside Brazil, then transform into gambling fronts once users log in from within the country.
These so-called jacket apps have proliferated in Brazil’s App Store rankings across Navigation, Travel, and Weather categories, according to an investigation by 9to5Mac. Many feature AI-generated animal illustrations as icons and are published by developer accounts with single listings, common Vietnamese-sounding names, identical privacy policies, and no recorded updates. Most clock in at roughly 15MB, a pattern that points to template-based production.
The technical execution relies on geolocation detection built into the app code. When opened from outside Brazil, the apps display their legitimate App Store screenshots. When accessed from a Brazilian IP, the same binary triggers betting functionality. This allows the apps to clear Apple’s review process using one behavior, then operate under a completely different purpose once approved.
A public GitHub repository discovered as part of the investigation contained instructions for a Cursor agent to generate these apps rapidly. The shared privacy policies, minimal file sizes, and lack of updates across dozens of accounts suggest a coordinated operation using code generation and cloning at scale.
The revelation arrives as Brazil’s Ministry of Justice has given Apple five business days to explain how it detects apps that hide or change betting features after approval, verify that operators hold federal authorization, and prevent minors from accessing gambling services. This pressure dates back to April 2026, when Brazilian authorities first flagged “countless apps” offering or facilitating minors’ access to unauthorized betting.
Apple responded in May 2026 by requiring apps with gambling features to provide a federal betting license and automatically assigning them an A18 age rating in Brazil. The jacket app scheme exposes a critical gap: those safeguards only apply to apps that declare gambling in their metadata. Apps that hide the feature entirely bypass the control.
The timing is damaging because it comes on the same day Apple was ordered to remove eight AI nudify apps after pressure from the San Francisco City Attorney. That removal followed a separate investigation from the Tech Transparency Project six months earlier that uncovered dozens of similar apps. The pattern is clear: Apple’s App Store review process struggles to enforce quality and safety at scale, whether through reactive measures like licensing checks or proactive detection of policy-violating categories.
9to5Mac reached out to Apple for comment, but the company had not responded at publication. Apple’s review system has now failed to catch a geo-location masking scheme involving 60+ apps across multiple categories, a technical approach that should be detectable if reviewers test from multiple regions or if the company’s automated safeguards check for conditional code paths.
