Google's Android verification will lock developers in sanctioned nations out of global app distribution

Starting September 30, someone in Havana will have an easier time installing apps on their Android phone than someone in Jakarta.

That inversion is the unintended consequence of Google's new Android developer verification program, which begins enforcement in Brazil, Indonesia, Singapore, and Thailand on September 30 and is scheduled to expand globally in 2027 1. The program requires developers to provide their legal name, address, and potentially a government-issued ID, plus a one-time $25 fee, before their apps can be installed on certified Android devices 2. Certified devices are phones running Google services and Play Protect, which by F-Droid's count covers more than 95 percent of Android devices outside China 2. The requirement applies not just to the Play Store but to third-party stores run by Samsung, Xiaomi, OPPO, vivo, Honor, and Transsion 1.

Google says the verification targets malware. Sideloaded apps carry far more malicious software than Play Store apps, and scammers increasingly talk victims into installing harmful APKs on the spot. An identity check and a 24-hour waiting period for unverified apps are designed to disrupt that pattern 2.

The paradox emerges in the fine print. An FAQ entry on Google's developer site states that "devices in sanctioned countries will be excluded from Android developer verification checks." 3. A Google spokesperson confirmed to Ars Technica that developers in sanctioned nations will not be permitted to go through the verification process 3. The US sanctions list includes Iran, Cuba, North Korea, and occupied areas of Ukraine 3.

Stack those facts together and the paradox snaps into focus. Phones in sanctioned countries are mostly Google-certified devices imported from markets where Google operates, so they run Google services and Play Protect. They simply will not enforce the new verification checks 3. No ID gate. No $25 fee. No 24-hour cooldown for sideloading.

For developers in those same countries, the picture is bleaker. A developer in Cuba who today distributes an app globally will, once the program reaches their target markets, only be able to reach users within sanctioned countries. The app will not install on phones in London, Tokyo, or Sao Paulo because it comes from an unverified developer, and its creator cannot become verified because Google will not process verification for residents of sanctioned nations 3.

The result is a two-tier Android world. Sanctioned nations keep unrestricted sideloading on Google-certified phones. Compliant countries get new installation barriers. The countries the US Treasury Department most wants to restrict end up with the fewest app distribution restrictions of any market in Google's verification regime.

Google likely cannot process identity verification data or conduct transactions with entities in sanctioned regions without risking violations of US export controls and sanctions law 3. But the practical result is that Google has effectively tied the ability to distribute Android apps internationally to the US Treasury Department's sanctions list 3.

The verification program has drawn sustained pushback since Google announced it in August 2025. F-Droid, the free-software app repository, says the requirement would end its project because it builds and signs apps from pseudonymous contributors who will not hand Google a legal identity 2. A coalition called Keep Android Open, backed by more than 70 organizations across 23 countries, has asked Google to drop the ID requirement for apps distributed outside the Play Store 2. EFF warns that a centralized registry of every Android developer's identity would chill development and create a database governments could compel access to 4. Brave argues that developers of VPNs, encrypted messaging apps, and Tor-based tools would be forced to surrender government IDs to Google, driving privacy-focused developers off the platform 5.

Google's concessions narrow but do not eliminate the friction. An advanced flow lets tech-savvy users install unverified apps after enabling developer mode, restarting their device, and waiting 24 hours 2. A free limited-distribution account lets students and hobbyists share apps with up to 20 devices without a government ID 1. Google says "Sideloading is fundamental to Android, and it's not going anywhere." 6.

When the program expands globally in 2027, every Android developer on earth will need to clear Google's identity check to distribute apps internationally, unless they happen to live in a country the US Treasury has sanctioned. A developer in Tehran or Havana who built an app for a global audience on the same open terms as everyone else will be cut off from that audience not by Google's choice but by the geography of US foreign policy. Google has built a gate where platform policy and foreign policy share the same lock. The countries caught in between are the ones with no key.