Google play store is a haven of both Malicious and authentic apps, as I talked about in this post, Not all crypto apps in App stores are safe
You will realise that just downloading from Google play or appstore isn't enough. You have to use the official link from the official website of the coin/token which could just be a direct download or probably link you to an app store to their official app.

Also you have to be very vigilant, look at the number of downloads, number of reviews, positive and negative, time and pattern of reviews(very important in determining fake reviews)