Starting September 30, 2026, Google will begin requiring all Android developers to verify their identity before their apps can be installed on devices running Google services. That includes sideloaded apps, not just those distributed through the Play Store. But buried in an FAQ, the company quietly carved out an exemption: devices in sanctioned countries won’t be subject to the verification checks at all.

What the verification system actually does

Google’s developer verification program will initially roll out in Brazil, Indonesia, Singapore, and Thailand. Developers who want their apps to be installable on certified Android devices, even outside the Play Store, will need to register their identity details with Google.

This isn’t just a Play Store policy. It extends to third-party app stores operated by Samsung, OPPO, Honor, and others. If your phone runs Google services, which is functionally every Android device outside Russia and China, the verification gate applies.

The Electronic Frontier Foundation and Brave have both raised concerns about what this means for independent software distribution. Their argument is straightforward: verification requirements create friction that disproportionately affects small developers, privacy-focused tools, and apps that challenge platform incumbents.

The sanctions exemption and its implications

The exemption for sanctioned nations appears to be a legal compliance move rather than a deliberate security choice. Google likely can’t process identity verification data or conduct transactions with entities in sanctioned regions without running afoul of US export controls and sanctions law.

Russia and China were already largely outside the Google services ecosystem. Russia has been building its own app distribution infrastructure, and China has long operated without Google Play. The sanctions exemption effectively codifies what was already the practical reality for those markets while extending the carve-out to other sanctioned territories.

Why crypto developers should pay attention

Google hasn’t mentioned cryptocurrency or blockchain in any of its verification documentation. There’s no direct targeting of crypto apps.

Under the new system, developers who have historically avoided the Play Store will need to register with Google even if they never touch the Play Store. There’s also the geographic angle. Crypto adoption has been growing rapidly in several of the initial rollout countries, particularly Brazil, Indonesia, and Thailand. Developers serving those markets with crypto applications distributed outside Google Play will face verification requirements starting late next year.

Samsung, which operates its own Galaxy Store and has been increasingly friendly to crypto wallets and blockchain features, will still be subject to Google’s verification requirements on its devices. Any third-party store running on Google-certified hardware falls under the same umbrella.

Companies like MetaMask, Trust Wallet, and Phantom already distribute through the Play Store and likely won’t be affected.