The App Store game, called “Jungle Runner 2k21,” appeared as a running platform game with rudimentary graphics and animations. However, iOS users running the app in Turkey— or elsewhere with a VPN set to Turkey — would see a web view for an online casino.

The secret casino allowed users to gamble using real money through non-Apple payment systems. FlickType developer Kosta Eleftheriou first spotted the scam app.

“This @AppStore app pretends to be a silly platformer game for children 4+,” tweeted Eleftheriou, “but if I set my VPN to Turkey and relaunch it becomes an online casino that doesn’t even use Apple’s IAP.”