A routine WhatsApp message carrying what appeared to be a traffic challan cost a Nikol-based businessman nearly Rs 10 lakh, highlighting the growing threat of malicious APK files used by cyber fraudsters to gain control of victims' smartphones and banking credentials.
According to a complaint lodged with the cybercrime police, the 35-year-old iron trader received a file named "RTO Challan.apk" on WhatsApp in December 2025. Assuming it was a legitimate document related to a traffic violation, he opened the file on his mobile phone, unknowingly allowing fraudsters access to his device.
Police said the businessman realised something was amiss on December 20, 2025, while travelling from his residence to his office, when he received three SMS alerts notifying him of substantial withdrawals from his bank accounts through IMPS transfers. The unauthorised transactions prompted him to immediately switch off his mobile phone and rush to a nearby bank branch, where he managed to get the affected accounts frozen.
Investigators found that Rs 9.99 lakh was siphoned off from two bank accounts linked to his mobile number. The stolen money was allegedly transferred through three IMPS transactions of Rs 1.99 lakh, Rs 3.99 lakh, and Rs 3.99 lakh to another bank account. One of the compromised accounts was jointly operated by the complainant and his wife.
The victim subsequently reported the incident through the National Cyber Crime Helpline, triggering an inquiry by cybercrime authorities. During the investigation, officials informed him that opening the APK file had likely enabled the fraudsters to install malicious software on his device, giving them remote access and allowing them to obtain sensitive banking information.
Cybercrime police have registered a case against unidentified persons on charges of cheating, unauthorised access to a computer system, identity theft, and criminal conspiracy. Investigators are now tracking the beneficiary accounts and following the money trail to identify those behind the fraud.
