How do you know if an app is a decoy?

How can one identify whether an app is a decoy designed to lure users into a trap? What are the key indicators or warning signs that should be looked out for? It's crucial to be vigilant in the digital age, especially when it comes to downloading and using apps that handle sensitive financial information or cryptocurrency transactions. Are there any specific checks or verifications that should be done before trusting an app with your data?