--- title: MegaCast discovery heats up as BuzzFeed exposes more bad actors in ad fraud scheme that impacted Facebook, Disney, and other brands description: BuzzFeed News has investigated and possibly identified a ring of bad actors related to Pixalate’s MegaCast mobile app laundering discovery. The extensive investigation demonstrates a clear example of the sophisticated ends taken by companies intent on commimtting mobile app ad fraud. image: https://www.pixalate.com/hubfs/Blog_Media/Blog%20photos/buzzfeed-mobile-app-ad-fraud-exposed.png --- [![pixalate-full-logo](https://www.pixalate.com/hs-fs/hubfs/Pixalate_Logos/pixalate-full-logo.jpg?width=150&height=60&name=pixalate-full-logo.jpg "pixalate-full-logo")](https://www.pixalate.com) Search **Menu** ** ** ![](https://www.pixalate.com/hubfs/Blog_Media/Blog%20photos/buzzfeed-mobile-app-ad-fraud-exposed.png) [Mobile](https://www.pixalate.com/blog/topic/mobile) | [Investigations](https://www.pixalate.com/blog/topic/investigations) | 4 min read # MegaCast discovery heats up as BuzzFeed exposes more bad actors in ad fraud scheme that impacted Facebook, Disney, and other brands Written by [Tyler Loechner](https://www.pixalate.com/blog/author/tyler-loechner) Oct 23, 2018 4:09:50 PM [BuzzFeed News](https://www.buzzfeednews.com/article/craigsilverman/how-a-massive-ad-fraud-scheme-exploited-android-phones-to) has investigated, expanded, and possibly identified a ring of bad actors related to Pixalate’s [MegaCast mobile app laundering discovery](https://blog.pixalate.com/mobile-app-laundering-bundle-id-megacast-alleged-sophisticated-invalid-traffic-ad-fraud). Their extensive investigation demonstrates a clear example of the sophisticated ends taken by companies intent on fraudulently profiting from mobile app advertising. The apparent scheme — involving app acquisitions by shell companies, fake emails and websites, and advanced malware — underscores the risky nature of the mobile in-app advertising landscape. BuzzFeed was alerted to the ad fraud scheme through Pixalate’s initial discovery, and used our findings as a foundation for their detailed inquiry. “The scheme began to unravel this summer when data scientists at Pixalate detected something alarming in an Android app called MegaCast,” wrote BuzzFeed. “The app’s pitch was that it enabled a user to play any video, regardless of format, on a streaming device. But behind the scenes, MegaCast was pretending to be something it wasn’t.” Over the past several months, Pixalate worked alongside BuzzFeed to help them better understand the MegaCast discovery and ad fraud within mobile apps. BuzzFeed News also conducted its own thorough investigation into the alleged scheme and uncovered new facts within the [unsettled mobile app environment](https://blog.pixalate.com/mobile-app-video-ad-fraud-programmatic). Through ongoing research, Pixalate has discovered that over 11 million individual devices were potentially impacted by the alleged MegaCast ad fraud scheme, adding risk not only to the reputation of the brands involved but also to the consumer devices themselves. ![megacast-mobile-app-ad-fraud-devices-impacted-buzzfeed-pixalate](https://www.pixalate.com/hs-fs/hubfs/Blog_Media/Blog%20photos/megacast-mobile-app-ad-fraud-devices-impacted-buzzfeed-pixalate.png?width=600&name=megacast-mobile-app-ad-fraud-devices-impacted-buzzfeed-pixalate.png) Using our global data intelligence, we conducted a quarterly analysis over the past year to see the number of devices, based on IDFA*, that had either MegaCast or any of the associated apps installed. ### **BuzzFeed says it identified parties behind the ‘massive ad fraud scheme’** BuzzFeed took Pixalate’s findings and pursued the bad actors at the source of the fraud scheme. BuzzFeed’s investigation found that “seemingly separate apps and companies are today part of a massive, sophisticated digital advertising fraud scheme involving more than 125 Android apps and websites connected to a network of front and shell companies in Cyprus, Malta, British Virgin Islands, Croatia, Bulgaria, and elsewhere.” BuzzFeed traced “corporate records, domain registration information, DNS data, and other publicly available sources … [which] led to [a] group of four men operating Fly Apps, which owns MegaCast, EverythingMe, and other applications.” “One way the fraudsters find apps for their scheme is to acquire legitimate apps through We Purchase Apps and transfer them to shell companies,” reported BuzzFeed. “They then capture the behavior of the app’s human users and program a vast network of bots to mimic it.” Pixalate regularly works with companies interested in preventing ad fraud and making the programmatic ecosystem more secure. We were pleased that BuzzFeed unearthed further significant findings and are adding any newly identified fraud sources to our detection and filtration products, including [Pixalate’s pre-bid blocklists](https://info.pixalate.com/pixalate-blocking-overview). ### **New: Pixalate reveals the scheme grew by 53% in Q4 2017** The total number of devices with any of the suspicious apps exploded in Q4 2017, potentially to exploit holiday budgets. As the chart above shows, the number of impacted devices rose 53% from Q3 to Q4 2017, leveling off above 11 million during the first half of 2017. We also analyzed the individual device types that were hit the hardest. Based on our data, Samsung device users were impacted by the apps in question the most. ![megacast-mobile-app-ad-fraud-scale-devices-buzzfeed-pixalate](https://www.pixalate.com/hs-fs/hubfs/Blog_Media/Blog%20photos/megacast-mobile-app-ad-fraud-scale-devices-buzzfeed-pixalate.png?width=800&name=megacast-mobile-app-ad-fraud-scale-devices-buzzfeed-pixalate.png) ### **Pixalate’s initial MegaCast mobile app laundering discovery** In June 2018, Pixalate [published](https://blog.pixalate.com/mobile-app-laundering-bundle-id-megacast-alleged-sophisticated-invalid-traffic-ad-fraud) a blog highlighting what we believed to be a significant example of [mobile app laundering](https://blog.pixalate.com/mobile-ad-fraud-what-is-mobile-app-laundering-sivt). We detailed how the MegaCast - Chromecast Player application — which had been downloaded over 1 million times at the time of our discovery — appeared to spoof dozens of other mobile apps as part of an elaborate laundering scheme. Based on our [conservative estimates](http://pixal.at/megacast-estimates), the MegaCast mobile app laundering activity was costing advertisers tens of millions of dollars per year. ### **Facebook, Disney among brands impacted by this mobile app ad fraud** In July, we conducted follow-up research into the MegaCast mobile app laundering activity and built a partial list of companies that we believe were victimized by the scheme. Given the magnitude of this mobile app ad fraud activity, a large number of brands were impacted. Based on our additional research, Pixalate was able to identify and verify some of the exact brands we believe were impacted, including Facebook, Disney, Instagram, Hulu, Volvo, Ram Trucks, L’Oreal, Lyft, Marvel, and more. For a more complete list of the brands we believe were impacted, download our free [whitepaper](https://info.pixalate.com/brands-impacted-by-megacast-apparent-app-laundering) that shares network capture images as well as images of the creatives. ### **See the mobile app ad fraud in action** Pixalate’s data analysis team captured video evidence of the mobile app laundering, which was carried out via Bundle ID spoofing. This video shows what can go on behind the scenes during an ad fraud attack.   ### **Learn more about the MegaCast mobile app laundering discovery** Interested in learning more about Pixalate’s mobile app laundering discovery? Below are key pieces of information regarding our findings: - Initial discovery [[blog](https://blog.pixalate.com/mobile-app-laundering-bundle-id-megacast-alleged-sophisticated-invalid-traffic-ad-fraud)] - Brands impacted [[blog](https://blog.pixalate.com/brands-impacted-by-megacast-apparent-mobile-app-laundering-spoofing-ad-fraud-ivt)] - Brands impacted [[whitepaper](https://info.pixalate.com/brands-impacted-by-megacast-apparent-app-laundering)] - Primary Bundle IDs impacted [[csv file](https://info.pixalate.com/top-bundle-ids-megacast-discovery)] - Mobile app laundering primer [[blog](https://blog.pixalate.com/mobile-ad-fraud-what-is-mobile-app-laundering-sivt)] - BuzzFeed article [[article](https://www.buzzfeednews.com/article/craigsilverman/how-a-massive-ad-fraud-scheme-exploited-android-phones-to)] **Note: IDFAs are not permanent and can be regenerated by the user.* ### Search Blog Search ### Follow Pixalate ### Subscribe to our blog *By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use ](https://www.pixalate.com/terms)and [Privacy Policy.](https://www.pixalate.com/privacypolicy) Previous Story [← Pixalate Week in Review: October 15 - 19, 2018](https://www.pixalate.com/blog/programmatic-ad-fraud-news-week-in-review-october-19-2018) [** ](https://www.pixalate.com/blog) Next Story [Pixalate Week in Review: October 22 - 26, 2018 →](https://www.pixalate.com/blog/programmatic-ad-fraud-news-week-in-review-october-26-2018) ## You May Also Like These Stories on Mobile [![](https://www.pixalate.com/hubfs/Blog%20Media/2026%20Covers%20and%20Images/OpenEPG%20landing%20page%20hero%20image.png) ](https://www.pixalate.com/blog/pixalate-launches-openepg-1.0-analytics-to-bring-linear-tv-grade-measurement-verification-to-open-programmatic-ctv) [Mobile](https://www.pixalate.com/blog/topic/mobile) ### [Pixalate Launches OpenEPG™ 1.0 Analytics to Bring Linear TV-Grade Measurement & Verification to Open Programmatic CTV; OpenEPG DB™ Unlocks 12,875 Shows From 318 Channels Using Bidstream Bundle ID](https://www.pixalate.com/blog/pixalate-launches-openepg-1.0-analytics-to-bring-linear-tv-grade-measurement-verification-to-open-programmatic-ctv) Jun 16, 2026 8:33:30 AM | 5 min read [![](https://www.pixalate.com/hubfs/Blog%20Media/2026%20Covers%20and%20Images/United%20States%20%26%20GLOBAL%20-%20IVT%20Benchmarks%20-%20Q1%202026.png) ](https://www.pixalate.com/blog/q1-2026-ad-fraud-benchmarks-report-for-north-america) [Mobile](https://www.pixalate.com/blog/topic/mobile) ### [Pixalate Releases Q1 2026 North America Invalid Traffic (IVT) & Ad Fraud Benchmarks: United States Mobile Apps See 32% Invalid Traffic (IVT) Rate](https://www.pixalate.com/blog/q1-2026-ad-fraud-benchmarks-report-for-north-america) Apr 29, 2026 8:00:01 AM | 2 min read [![](https://www.pixalate.com/hubfs/Blog%20Media/2026%20Covers%20and%20Images/UNITED%20KINGDOM%20%26%20GERMANY%20%26%20GLOBAL%20-%20IVT%20Benchmarks%20-%20Q1%202026.png) ](https://www.pixalate.com/blog/q1-2026-ad-fraud-benchmarks-report-for-emea) [Mobile](https://www.pixalate.com/blog/topic/mobile) ### [Pixalate Releases Q1 2026 EMEA Invalid Traffic (IVT) & Ad Fraud Benchmarks: United Kingdom Connected TV (CTV) Most at Risk with 46% IVT Rate](https://www.pixalate.com/blog/q1-2026-ad-fraud-benchmarks-report-for-emea) Apr 29, 2026 8:00:00 AM | 2 min read ** ### Subscribe to our blog *By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use ](https://www.pixalate.com/terms)and [Privacy Policy.](https://www.pixalate.com/privacypolicy) ![pixalate-logo-red-small](https://www.pixalate.com/hs-fs/hubfs/2018NewTemplate/pixalate-logo-red-small.png?width=208&name=pixalate-logo-red-small.png "pixalate-logo-red-small") ** By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy) Products [Analytics](https://www.pixalate.com/products/analytics) [Blocking](https://www.pixalate.com/products/blocking) [Media Rating Terminal](https://www.pixalate.com/products/mrt) [Publisher Trust Indexes](https://www.pixalate.com/rankings/?group=app&reportId=publisherTrustIndex) [Seller Trust Indexes](https://www.pixalate.com/rankings/?group=app&reportId=publisherTrustIndex) [IoT Device Rankings](https://www.pixalate.com/rankings/?group=app&reportId=iotDeviceReach) Resources [Blog](https://blog.pixalate.com/) [Press](https://www.pixalate.com/press) [Careers](https://www.pixalate.com/jobs) [Team](https://info.pixalate.com/pixalate-leadership-team) Contact Email [** sales@pixalate.com ](mailto:sales@pixalate.com) [** privacy@pixalate.com ](mailto:privacy@pixalate.com) US: [** +1 888 749 2528 ](tel:+1%20888%20749%202528) EU: [** +44 (0)800 011 2050 ](tel:+44%20(0)800%20011%202050) Slack: [Join ATSAPI Slack Channel ](https://atsapi-pixalate.slack.com/join/shared_invite/zt-10dtow5cj-OEtlNr5yzJkrZMQUqcEEow#/shared-invite/email) Offices Global Offices US 1775 Greensboro Station Place, Suite 425, McLean, VA 22102 UK 20 North Audley Street London, W1K 6WE, United Kingdom EU 10 Earlsfort Terrace Dublin 2, D02 T380, Ireland Singapore 10 Anson Road, #22-02 International Plaza, Singapore 079903 [![facebook](https://www.pixalate.com/hubfs/footer/icons/facebook.png) ](https://www.facebook.com/pixalate) [![x](https://www.pixalate.com/hubfs/footer/icons/twitter-x.png) ](https://twitter.com/pixalateinc) [![linkedin](https://www.pixalate.com/hubfs/footer/icons/linkedin.png) ](https://www.linkedin.com/company/pixalate) ![wechat](https://www.pixalate.com/hubfs/footer/icons/wechat.png) [![slack](https://www.pixalate.com/hubfs/footer/icons/slack.png) ](https://atsapi-pixalate.slack.com/join/shared_invite/zt-10dtow5cj-OEtlNr5yzJkrZMQUqcEEow#/shared-invite/email) [Terms of Use](https://www.pixalate.com/terms) [Privacy Policy](https://www.pixalate.com/privacypolicy) [GDPR Compliance](https://www.pixalate.com/gdpr) Disclaimer Copyright © 2025 Pixalate [Back to top **](https://www.pixalate.com/blog/megacast-mobile-app-ad-fraud-scheme-laundering-buzzfeed#) # Disclaimer Disclaimer: The content of this page reflects Pixalate’s opinions with respect to the factors that Pixalate believes can be useful to the digital media industry. Any proprietary data shared is grounded in Pixalate’s proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate’s opinions are just that - opinion, not facts or guarantees. Per the MRC, “'Fraud' is not intended to represent fraud as defined in various laws, statutes and ordinances or as conventionally used in U.S. Court or other legal proceedings, but rather a custom definition strictly for advertising measurement purposes. Also per the MRC, “‘Invalid Traffic’ is defined generally as traffic that does not meet certain ad serving quality or completeness criteria, or otherwise does not represent legitimate ad traffic that should be included in measurement counts. Among the reasons why ad traffic may be deemed invalid is it is a result of non-human traffic (spiders, bots, etc.), or activity designed to produce fraudulent traffic.” ** ** *By clicking Download and entering your email address, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and have read and acknowledge our [Privacy Policy](https://www.pixalate.com/hubfs/2024-08-20_Pixalate_Privacy_Policy.pdf). *Copyright © 2025 Pixalate** * * * * * * * * * * * * * * * * * * * * * * * * * * * * × ## Subscribe to the Pixalate Blog The first step in ad fraud prevention. Loading... By entering your email address and clicking Submit, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy). ![pixalate-logo-white](https://www.pixalate.com/hubfs/Blog_V2_08_26_2016/logo/Pixalate_Logo_WHITE.png) ##### Contact Us12 Loading... ![pixalate-logo-white](https://www.pixalate.com/hubfs/Blog_V2_08_26_2016/logo/Pixalate_Logo_WHITE.png) ##### Download GSTI Loading... Schedule your demo today Please complete all fields Loading... By entering your email address and clicking Submit, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy). * * * * *