Look up “boa login”, tap ad, YOUR PHONE HAS A VIRUS, tap to install. Suddenly you have a bank app on your phone.

You’re welcome.

This happens more often than you’d think. It’s even easier when you get targeted attacks via sms saying approximately the same thing. People don’t look at the URL bar.