Victims will have to delete the app entirely or invalidate the app's tokens in order to stop scammers from being able to read or write emails.