Yep, it’s classic typosquatting, and the giveaway is usually the developer account plus a slightly off store listing link or website. If you’re unsure, search the app from the official publisher page instead of trusting the first result.
Also watch for subtle Unicode lookalikes in the name and package ID, since they can render identically while pointing to a different developer. When in doubt, verify the publisher via the official website link and store certificate details, not just the listing text.
Yeah, homograph spoofing is nasty because the UI makes it look identical, so copying the package ID into a monospace/plain-text view and checking for non-ASCII chars is a solid quick sanity check. Pair that with verifying the publisher/signing fingerprint from a trusted source and you’ll catch most of these fakes fast.
Also worth turning on your editor’s “render invisibles / highlight confusables” setting, because zero‑width chars and mixed scripts can slip past even monospace views.