A 37-year-old homemaker from Nikol, Ahmedabad, fell victim to a sophisticated cyber fraud, losing Rs 7.5 lakh after fraudsters sent her a fake KYC update message on WhatsApp. The incident, reported to the Cybercrime Police, highlights the growing threat of malicious APK files used to gain unauthorized access to bank accounts.
How the Scam Unfolded
On May 19, the complainant received a WhatsApp message from an unknown number containing a forged KYC update notice. The message included an APK file named "Pan Card Update.apk" and warned that her bank account would be suspended unless she updated her Aadhaar and PAN details through the application.
Initially ignoring the message, the victim later downloaded the APK file onto her mobile phone. A few days later, on May 24, she and her husband noticed multiple debit alerts and OTP messages on her phone, despite neither of them conducting any banking transactions.
Discovery of Unauthorized Transactions
Suspicious of foul play, the couple contacted the national cybercrime helpline. When attempting to access the victim's net banking account to retrieve transaction details, they discovered that the registered email address linked to the account had been changed without their knowledge. Further investigation revealed that an unknown Gmail account had been linked to the bank account.
After obtaining the account statement, the family found that seven unauthorized transactions were carried out on May 23. The transactions included transfers of Rs 1.8 lakh, Rs 1.9 lakh, Rs 49,500, Rs 1.2 lakh, Rs 25,000, Rs 25,000, and Rs 1.5 lakh, totaling Rs 7,46,502.
Fraudsters' Modus Operandi
According to the complaint, the fraudsters posed as banking officials and used the malicious application to gain access to the victim's mobile device. They stole account credentials and intercepted OTPs before transferring money to multiple beneficiary accounts.
The victim immediately blocked her account and debit card and registered a complaint through the cybercrime helpline. A formal complaint was lodged on June 6.
Police Investigation Underway
Police have launched an investigation to identify the perpetrators behind the WhatsApp number, the altered email account, and the accounts that received the fraudulently transferred funds. Authorities urge citizens to exercise caution and avoid downloading APK files from unknown sources.
