Skip to content

Remove MSCA regulator from Japan section#254

Open
oliveiraleo wants to merge 1 commit intokeepandroidopen:mainfrom
oliveiraleo:update-jp-regulators
Open

Remove MSCA regulator from Japan section#254
oliveiraleo wants to merge 1 commit intokeepandroidopen:mainfrom
oliveiraleo:update-jp-regulators

Conversation

@oliveiraleo
Copy link
Copy Markdown
Contributor

Hello,

As reported by @ribless-op in #246, the Mobile Software Competition Act (MSCA) consulting desk will be shutdown in March, 31th. As stated in MSCA's website (screenshot below) the inquiries should be directed to the Japanese FTC using this form (page in Japanese). Therefore, this PR removes MSCA from the Japan's regulators list.

image

This PR closes #246

Best regards,
Leo.

@marcprux
Copy link
Copy Markdown
Collaborator

Thanks for the contribution.

Do you have any insight into why the MSCA is shutting down? Changes in policy or agenda or leadership? I'd be interested in learning more, but I can't seem to find any English-language information about it…

@ribless-op
Copy link
Copy Markdown

A few weeks ago, I received a response from the consultation desk stating that they had communicated to
Japan's FTC my (our) concerns and issues regarding the Android Developer Verification program.

I am not positive, but I believe that JFTC has already obtained sufficient information and proof through
the consultation desk to begin a re-investigation into Google as part of the cease-and-desist order that was issued on April 15, 2025.
https://www.jftc.go.jp/en/pressreleases/yearly-2025/April/250415.html
https://www.asahi.com/ajw/articles/15711421
Until more proof is required, I believe the consultation desk will remain closed.

According to the consultation desk, if JFTC needs more proof, they may get in touch with me.
If JFTC actually asks me for these, please help me find information or proof about the verification program
(or even the 24-hour waiting period) in your country.
Thank you!

@oliveiraleo
Copy link
Copy Markdown
Contributor Author

Thanks for the contribution.

Do you have any insight into why the MSCA is shutting down? Changes in policy or agenda or leadership? I'd be interested in learning more, but I can't seem to find any English-language information about it…

Except for the message on their website, I couldn't find any additional information in English. I believe any news regarding MSCA will be shared on MSCA's page of the JFTC website. As far as I can tell, the so‑called 'Smartphone Act' is still in force, so there are no policy changes.

@ribless-op if you or somebody else has extra information (even if it's in Japanese) please, feel free to share it here or in the original issue.

Kind regards,
Leo.

@ribless-op
Copy link
Copy Markdown

ribless-op commented Mar 29, 2026

I read the National Police Agency's (NPA) 2025 cyber security report.
https://www.npa.go.jp/publications/statistics/cybersecurity/data/R7/R07_cyber_jousei.pdf

I was unable to locate any reference to third-party apps or other app stores in either the report or the statistics presented on pages 163 and 164.
If either of these were the gateway to the fraudulent activities, as Google claims, the report should have explained it clearly.
NPA most likely classified the apps or stores under "Others" (55/399 cases in 2025); if this is the case, the number of cases was so small that it didn't need to mention separately.

I felt after reading it that Gemini and other generative AIs were far more vicious than any other apps or app stores.

Note: I read it while I had the stomach flu, so I may have missed or misread some important parts.
Everyone, be careful and stay well!

@ribless-op
Copy link
Copy Markdown

ribless-op commented Mar 29, 2026

Hello again,

I also visited the website of the Japan Cybercrime Control Center.
https://www.jc3.or.jp/threats/examples/article-654.html
(No English translation available for this information)

Once again, I could not locate any information regarding third-party apps or alternative app stores.
I have no doubt that Google Japan is aware that (potential) victims sideload suspicious, malicious, or unauthorized apps from links provided in SMS in the majority of cases, rather than from F-droid or any other app stores.
I'm not sure about other countries, but F-droid, APKMirror, Aurora Store, and so on pose no threat to Japan.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The Japanese government agency to contact will be changed

3 participants