Malicious APK over WhatsApp scam in India

How this scam works

A file named like a bank, RTO challan, PM scheme or wedding invite arrives as an .apk; installing it reads your SMS OTPs.

हिंदी में सारांश

बैंक या चालान के नाम की .apk फाइल इंस्टॉल न करें — यह OTP चुराती है।

ठगी होने पर तुरंत 1930 पर कॉल करें या cybercrime.gov.in पर शिकायत दर्ज करें।

Warning signs

• App sent as a file, not from Play Store
• Asks for SMS or accessibility permission
• Named after a bank or govt service

If you're targeted

1. Don't pay, don't share OTPs or PINs, and don't install any app they suggest.
2. If money was sent, call your bank and then 1930 within the first hour — quick reporting gives the best chance of freezing the money.
3. File a complaint at cybercrime.gov.in and keep screenshots and payment details as evidence.

India helplines · भारत हेल्पलाइन

• 1930National cyber fraud helpline (24×7) · साइबर फ्रॉड हेल्पलाइन
• 112Emergency / police · आपातकालीन सहायता
• 14448RBI complaint helpline (bank / UPI) · RBI शिकायत
• 1915National Consumer Helpline · उपभोक्ता हेल्पलाइन
• cybercrime.gov.inFile an online complaint · ऑनलाइन शिकायत
• ChakshuReport fraud calls/SMS · फर्जी कॉल की रिपोर्ट

Official warning