No root does not mean no risk
Root access is only one kind of device privilege. An application can still request sensitive permissions, display misleading login forms or collect information without root. The label “no-root hack” is not a security assessment.
Check the package, not the promise
A modified package can copy the official name and icon. The original publisher may not have signed or reviewed it. A balance displayed in that package is not proof that the genuine service credited an account.
If you have installed one
Stop using it, remove the package and review permissions. Change exposed credentials through the official service on a trusted device. If a payment was involved, contact the payment provider through its verified channel.
Return to the official app
Use the publisher’s official store listing or verified distribution channel. Claim only rewards actually shown in the genuine app. See the APK checklist before any future installation.