Is This Android Play Protect Certified? How to Check & Why It Matters

Two phones can both say “Android” on the box and be completely different products. One has passed Google’s compatibility and security testing and ships with Google’s apps under license. The other is a clone or gray-market build running a modified system that pretends to be something it isn’t — sometimes down to a fake RAM figure and a fake Android version.

The quickest way to tell them apart is a single line hidden in the Play Store settings: Play Protect certification. This guide shows where to find it, what “not certified” really means, and how to unmask the fake specs that usually come with it.

What “Play Protect certified” means

Android itself is open source, so anyone can build a phone with it. But Google’s apps — Play Store, Gmail, Maps, YouTube and Google Play services — are licensed separately. To ship them, a manufacturer must pass Google’s compatibility test suites and security requirements for that exact build. Devices that pass are Play Protect certified.

Certification gives you three practical guarantees:

• Genuine Google apps that receive updates from Google, not modified copies from an unknown source.
• A tested security baseline, with Google Play Protect scanning apps in the background.
• Compatibility: apps that rely on Google Play services, Play Integrity and secure payments are far more likely to work.

Google publishes a list of partners whose devices are certified at android.com/certified/partners.

How to check certification in 30 seconds

1. Open the Play Store.
2. Tap your profile icon (top right) › Settings.
3. Tap About to expand it.
4. Find Play Protect certification. It reads either Device is certified or Device is not certified.

The menu layout has moved over the years. If you don’t see “About” under Settings, scroll to the bottom of Settings — the entry is always in the Play Store’s own settings, not the phone’s.

While you’re in the Play Store, tap the profile icon › Play Protect and run a scan. It should show that Play Protect is on and that no harmful apps were found.

Why a phone shows “Device is not certified”

Not certified doesn’t always mean fake. The common causes, from harmless to serious:

Harmless or explainable

• Custom ROMs. A phone running custom software after a bootloader unlock is usually uncertified. That’s a choice the owner made — see bootloader unlocking explained.
• Chinese-market software. Phones built for China don’t ship with Google’s apps; if someone installed them manually, the device often shows as uncertified.
• Huawei and Honor models launched after Google services were withdrawn ship without Google’s apps by design. Confirm the exact model with the Huawei Info check.

Serious

• Clone phones that copy the look of a Galaxy or iPhone-style design and run a modified, uncertified system.
• Gray-market tablets and phones from unknown brands with sideloaded Google apps.
• Tampered stock phones whose system partition has been modified.

Since 2018, Google has blocked newly built uncertified devices from signing in to Google apps, so on many uncertified phones Play Store sign-in fails or Google apps show warnings. Google offers custom-ROM users a registration page at google.com/android/uncertified, but that’s for enthusiasts — not a fix for a clone you’ve just bought.

Fake specs: how clones lie and how to catch them

Uncertified clones commonly edit the “About phone” page and system properties so the phone claims more than it has: 16 GB of RAM instead of 4, 1 TB of storage instead of 64 GB, the latest Android version on top of a much older base, a big-brand model name. Here’s how to see through it.

Check the build fingerprint with ADB

adb shell getprop ro.build.fingerprint
adb shell getprop ro.product.manufacturer
adb shell getprop ro.build.version.sdk
adb shell cat /proc/meminfo
adb shell df -h /data

• The fingerprint should start with the real brand and model. A “Samsung” with an unrelated brand in its fingerprint is a clone.
• SDK level is harder to fake than the version label. For reference, Android 13 is SDK 33, Android 14 is SDK 34 and Android 15 is SDK 35. A phone claiming Android 15 that reports SDK 27 (Android 8.1) is lying.
• MemTotal in /proc/meminfo shows real RAM in kilobytes — expect a bit under the advertised figure (a 4 GB phone shows roughly 3.5–3.8 million kB).
• df -h /data shows the actual user storage partition.

Full setup steps are in our ADB commands guide.

Without a computer

• Dial *#06#. Clones sometimes show a generic, duplicated or invalid IMEI. Validate it with the tool below.
• Copy a large video file to the phone. Fake-storage phones fail or corrupt files once the real capacity runs out.
• Open a demanding game or the camera at full resolution. Clones with weak chips lag badly or produce soft, low-resolution photos despite claimed megapixels.
• Look at the camera app: clone cameras often upscale and label a 13 MP sensor as 108 MP.

Confirm the phone with an IMEI record check

The IMEI is where clones most often fall apart. A genuine phone’s IMEI begins with a Type Allocation Code that belongs to its real manufacturer and model — learn more in what a TAC code is. Type tac followed by the first 8 digits of the IMEI in the terminal to look it up, or imei followed by the full number to validate it:

Then run a manufacturer and model check. If the record says a budget phone from an unknown factory while the screen says “Galaxy S24 Ultra”, you have your answer. For genuine devices, go deeper with the brand report — the Samsung Info, Google Pixel Info or Xiaomi check — and finish with a GSMA blacklist check.

Checklist before you pay

• Play Store › Settings › About shows Device is certified.
• Play Protect is on and a scan finds nothing harmful.
• The build fingerprint and manufacturer match the brand on the box.
• RAM and storage match the listing.
• The IMEI is valid, matches Settings and returns the right model in a record check.
• No previous owner’s Google account is signed in.

Our check-before-you-buy guide covers the rest.

Verdict: “Device is certified” is one of the strongest single signals that an Android phone is what it claims to be. “Not certified” on a phone sold as a mainstream stock device means stop and verify everything — specs, fingerprint and IMEI record — before any money changes hands.