Yep. Scammers have managed to get people to install profiles on their devices so they can run non-appstore approved scam apps.