Ahmedabad Accountant Loses Rs 10.7 Lakh to WhatsApp APK Scam
A 50-year-old accountant from Nikol, Ahmedabad, fell victim to a sophisticated cybercrime after receiving a WhatsApp message from his employer containing a file named 'RTO E-challan.apk'. Believing it to be an official communication regarding a traffic memo, he installed the file without hesitation.
The moment he entered his name and mobile number into the app, he received an alert about money being debited from his account. He immediately deleted the app, but the damage was already done. Within 24 hours, cybercriminals had siphoned off a staggering Rs 10.7 lakh from his accounts.
How the Scam Unfolded
The victim, who works with a private firm in Vatva GIDC and frequently uses mobile banking apps, recounted the incident to Cybercrime police. The fraud began on February 19 when I received the message from my employer, he said. I deleted the app the second I realised it was malicious, but the following day, I received multiple banking alerts.
Upon contacting his bank, he discovered that the cyberfraudsters had gained unauthorised access to his mobile phone and banking credentials. Police explained that clicking on malicious APK files grants cybercriminals remote access to victims' devices, enabling them to steal sensitive information like banking details and intercept one-time passwords (OTPs).
Financial Impact and Modus Operandi
In this case, the cybercriminals allegedly used the compromised access to take out instant loans in the victim's name—one for Rs 5.3 lakh and another for Rs 4.5 lakh. They then combined these amounts with existing funds in his accounts and executed multiple fraudulent transactions.
- Rs 5 lakh was transferred from his primary account.
- Rs 2.6 lakh was siphoned off from another account.
- Rs 2.5 lakh was taken from a secondary holding.
- Rs 60,000 was withdrawn from a joint account he holds with his mother.
This totalled the devastating loss of Rs 10.7 lakh. The complainant acted swiftly by contacting the cybercrime helpline and approaching his bank to obtain statements confirming the fraudulent activities.
Legal Action and Police Response
The Cybercrime police registered a case on Monday against unknown persons under relevant sections of cheating and forgery under the Bharatiya Nyaya Sanhita, along with provisions of the Information Technology Act. Authorities are investigating the matter to trace the perpetrators and prevent similar incidents.
This incident serves as a stark reminder of the dangers posed by malicious APK files and unsolicited messages, urging the public to exercise extreme caution with digital communications and app installations.
