Is CamScanner Safe to Use? The 2019 Incident, Permissions, and Current Risks

This guide walks through what actually happened in 2019, what permissions the app requests today, and how to judge the risk for your own documents.

Important context first: Scanner.cam is an independent project. It is not CamScanner, it is not affiliated with CamScanner or its developer INTSIG, and it is not endorsed by them. This guide compares and assesses a separate product on its own merits.

The short answer

If you keep CamScanner updated from Google Play or the App Store, the malware risk today is low: the 2019 incident was fixed the same year, and no credible research since has reproduced it. The more durable considerations are privacy-related, not malware-related. CamScanner is a cloud product with an account, advertising on the free tier, and scans that sync to its servers. If you scan sensitive documents — passports, contracts, financial paperwork — that trust decision matters more than the old malware headline. For one-off or sensitive scans, a tool that processes everything on your device avoids the question entirely.

What happened in 2019

In August 2019, researchers at the security firm Kaspersky reported that recent Android versions of CamScanner contained a malicious module inside a third-party advertising library. The module, identified as Trojan-Dropper.AndroidOS.Necro.n, could download and run further malicious code — in practice, showing intrusive ads and, in some cases, signing users up for paid subscriptions without their consent. Google removed CamScanner from the Play Store, CamScanner removed the compromised advertising library, and a clean version (5.12.5) returned to the store in September 2019. The iOS version was never affected.

Two details from that episode are worth holding on to. First, the malicious code came from an advertising partner's library, not from CamScanner's own scanning code — which is why the fix was to strip the library out. Second, CamScanner stated at the time that there was no evidence document data had leaked as a result. Since then, no credible security research has reported a repeat of the problem, and the app has continued to receive regular updates, most recently in October 2026.

What permissions does CamScanner ask for?

Like any scanner app, CamScanner needs broad access to do its job. Its Play Store listing describes the following:

• Camera: to capture documents. Unavoidable for a scanner, and the permission you should expect.
• Storage: to save scans on your device. Standard, but note that storage access also means the app can read files it creates and manages.
• Phone/device identity: used to bind a Premium membership to a device and to let the app work without login. This is the permission most worth noticing — it is not needed for scanning itself, but for account and subscription management.
• Account and network access: for cloud sync, collaboration, and advertising on the free tier. Cloud sync is the feature that moves your scans off your device and onto CamScanner's servers.

None of these permissions is unusual for a free, cloud-connected scanner app. The point of reviewing them is not to find a smoking gun — it is to understand the trade: you get OCR (optical character recognition, the technology that converts pictures of text into editable text), cloud sync, and advanced editing, and in return the app holds an account tied to your device and a copy of your synced scans.

Where your scans go

This is the part of the safety question that has not changed since 2019. CamScanner is a cloud product: scans sync to its servers so they follow you across phone, tablet, and computer. That is genuinely useful if you scan every day across devices. It also means your documents exist somewhere other than your phone, under the terms of CamScanner's privacy policy and the laws of the countries where its servers operate. For everyday paperwork — receipts, notes, whiteboard photos — that is a reasonable trade for most people. For passports, contracts, bank statements, or client-confidential documents, it is worth pausing: a scanner that processes everything on your device never creates that copy in the first place.

A practical safety checklist

If you use CamScanner, or are deciding whether to, these steps cover the real risks:

• Install only from the official stores. Never install a "modded" or "premium unlocked" version from a third-party site. Those repackaged apps are a classic malware vector — the very thing the 2019 incident warns about — and they can steal accounts or documents. If a download promises paid features for free, treat it as a threat, not a bargain.
• Keep the app updated. The 2019 fix arrived as an update; running an old version is the one scenario in which the old risk could still apply. Turn on automatic updates for the app.
• Review permissions after installing. On both Android and iOS you can revoke permissions the app does not need for the task at hand, and re-grant them later.
• Think before syncing sensitive documents. You can use CamScanner for everyday scans and a device-local tool for sensitive ones. You do not have to pick a single scanner for everything.
• Check what the free tier does to your exports. Free-tier exports carry a "Scanned by CamScanner" watermark and the app shows ads. That is a quality and professionalism consideration, not a safety one — but it is the most common reason people look for an alternative.

So, is CamScanner safe to use?

On the evidence available today: yes, with the caveats above. The 2019 malware incident was real, it was fixed in 2019, and nothing credible since has suggested a repeat. The honest residual risk is not malware but trust: an account-based cloud scanner holds your documents on its servers, shows ads on the free tier, and requests device-identity permissions for subscription management. If that trade bothers you — especially for sensitive documents — scan in your browser instead, where nothing uploads anywhere. Either way, the single most important safety rule is the simplest one: get the app from the official store, keep it updated, and never install a cracked copy.

Was CamScanner ever unsafe?
Yes, briefly. In August 2019, Kaspersky found a Trojan dropper inside a third-party advertising library shipped in CamScanner's Android app. Google removed the app from the Play Store, CamScanner removed the library, and a clean version returned in September 2019. The iOS version was unaffected.

Is CamScanner safe to use now?
No credible research since 2019 has reproduced the malware finding, and the app is actively updated. The live consideration is privacy, not malware: it is a cloud product that syncs scans to its servers, so sensitive documents deserve a second thought.

Does CamScanner steal your documents?
There is no credible evidence that CamScanner leaks or steals document contents. Its cloud sync does store your scans on its servers by design, which is different from theft — but it is a reason to prefer on-device scanning for sensitive paperwork.

Should I delete CamScanner?
Not necessarily. If it is installed from the official store, kept updated, and used for everyday documents, it is a capable tool. Consider deleting it — or simply not using it for sensitive scans — if the cloud-sync model or the free tier's watermark and ads bother you.

Is Scanner.cam the same as CamScanner?
No. Scanner.cam is an independent, browser-based scanner. It is not affiliated with, endorsed by, or connected to CamScanner or its developer INTSIG. They are separate products.

Related guides

• Scanner.cam vs CamScanner: Honest Head-to-Head
• CamScanner vs Free Online Alternatives: Head-to-Head
• Is It Safe to Scan Documents Online? Privacy Explained
• Best Free Scanner App Without Watermark (2026)