APK Scam Foiled: Hyderabad Constable Helps Recover Rs. 5 Lakh
- Cyber crime alert stresses malicious APKs, OTP theft, bank spoofing
Hyderabad, Nov 8: Hyderabad City Cyber Crime Police said a prompt response by a city constable helped save half of a pensioner’s funds after a malicious APK fraud led to a ₹10 lakh loss.
The victim had searched online for Punjab National Bank’s contact number to submit a Life Certificate and, unknowingly, called a fake number posted by cyber criminals.
The callers posed as bank staff and told him to install an APK sent on WhatsApp for “verification.”
He installed the app and followed the instructions. The APK granted remote access to his phone, exposed his banking details, and enabled the fraudsters to control the device.
Soon after, the victim began receiving debit alerts and OTP messages. The malware forwarded OTPs to the fraudsters, who used them to make unauthorized transactions from his Punjab National Bank account.
APK scam Hyderabad
The victim then approached the Cyber Crime Police Station, Hyderabad. Police Constable N. Srikanth Naik, ARPC-10683 assisted him via the National Cyber Crime Reporting Portal.
The team identified and removed the malicious app from the victim’s phone. Investigation showed that the money trail ran through Razorpay to Slice Small Finance Bank Limited.
A notice was sent to Razorpay’s Nodal Officer. Acting swiftly, Nodal Officer Harshavardhan Rao blocked ₹5,00,000, which is now being processed to the victim.
A technical analysis found the APK had permissions to read SMS and OTPs. Using those OTPs, the fraudsters logged into the victim’s PNB internet banking account.
This technique bypassed typical fraud alerts since internet banking actions may not trigger verification calls.
The fraudsters also tried to take over the victim’s WhatsApp by re‑registering the account on another device.
They then impersonated him by messaging his contacts for money and attempted to spread the same malicious APK further, extending the fraud chain.
Public advisory issued by Hyderabad Cyber Crime Police
Public advisory issued by Hyderabad Cyber Crime Police warned that cyber criminals are circulating malicious APKs—“RTO CHALLAN,” “RTA CHALLAN 140.apk,” “Customercare.apk,” and “Bank apk”—via WhatsApp, SMS, social media links, and groups.
Users were told not to install such files even if sent by known contacts. Once installed, these apps can seize control of phones, harvest personal data, intercept banking information and OTPs, and cause large financial losses.
The safety guidance stressed simple steps. Never download APKs from unknown sources. Verify bank contact numbers only on official websites and trusted sources.
Download apps only from Google Play Store or Apple App Store. Do not share bank details, card numbers, CVV, OTPs, or personal information with anyone, even if they claim to be from a bank or a government agency.
Do not save credit or debit card or internet banking credentials on e‑commerce platforms, and delete stored card details after use.
Officials added that quick reporting through the National Cyber Crime system improves the chances of fund blocking and recovery.
Now you can get the latest stories from Indtoday on Telegram every day. Click the link to subscribe. Click to follow Indtoday’s Facebook page, Twitter, and Instagram. For all the latest Hyderabad News updates
More Stories….
Danam Nagender Says No Notice on Disqualification
Danam Nagender says he has not received Speaker notice on disqualification petition and will respond directly if served.
Rajya Sabha Seats: CM Revanth In Delhi
Rajya Sabha Seats in Telangana spark suspense as CM Revanth Reddy heads to Delhi amid differences over second Congress candidate.
