In a distressing incident highlighting the growing sophistication of cybercrime, a retired police officer in Bhopal was allegedly swindled out of Rs 2.40 lakh by fraudsters using a counterfeit online pensioner life certificate scheme. The elaborate scam, which unfolded over several days, exploited the victim's trust in a process familiar to all pensioners.
The Deceptive Link and Initial Trap
The victim, identified as 66-year-old Jwalaprasad Patel, a retired Assistant Sub-Inspector (ASI) residing in Shiv Shakti Nagar, Chhola, was browsing Facebook on his mobile phone on November 8, 2025. During his scroll, he encountered a post that appeared to be from a nationalised bank, promoting a service for pensioners to update their life certificate online. Believing the advertisement to be legitimate, Patel clicked on the provided link.
The link directed him to an online form, which he dutifully filled with his basic personal details, including his name, date of birth, email address, and mobile number. This initial step seemed routine and harmless, setting the stage for the fraudsters' next move.
The Elaborate Con: APK Files and OTPs
Approximately fifteen minutes after submitting the form, Patel received a phone call along with a WhatsApp message. The message contained an APK (Android application package) file, which he was instructed to download and install on his device. Complying with the instructions, he installed the file, which then launched another form titled "Life Certificate."
This second form asked for more sensitive information, including his Aadhaar number and mobile number. An OTP (One-Time Password) was subsequently generated on his phone, a step that further convinced Patel he was engaged in a genuine bank-authorised procedure. This psychological trick, mimicking official bank security protocols, is a common tactic used by cybercriminals to build false credibility.
Mistaking the entire process for an authentic bank activity, the retired ASI proceeded to share his ATM card details and PIN. He was even asked to upload his photograph, which he did without suspicion.
The Fraudulent Transactions and Realisation
Shortly after he submitted all the requested details, Patel noticed a small transaction of Re 1 being debited from his bank account. The callers assured him this was a test transaction and the amount would be refunded within 24 hours. However, moments later, his phone was bombarded with 7 to 8 OTPs in rapid succession.
This flurry of alerts finally raised his suspicions. Patel immediately contacted his bank's helpline and requested them to freeze his account to prevent any further transactions. At that moment, his account balance stood at approximately Rs 2.45 lakh.
Since the next day was a Sunday, Patel could not reactivate his account immediately. He visited his nearest bank branch on November 10 and successfully got the account activated after filing a formal application. Tragically, the very next day, on November 11, a staggering sum of Rs 2.40 lakh was fraudulently siphoned from his account.
Key Takeaways for Digital Safety
This case underscores several critical warnings for all digital users, especially senior citizens managing their finances online:
- Never download APK files from unknown sources via WhatsApp or SMS, even if the sender claims to be from a bank or government body.
- Official banks and government departments never ask for your ATM PIN, card details, or OTPs over the phone or via unofficial links.
- Be extremely cautious of advertisements and links on social media platforms like Facebook, especially those offering financial or governmental services.
- Verify any such communication directly by visiting the official bank branch or using the bank's verified mobile application or website.
The Chhola police have registered a case based on Patel's complaint and are investigating the cyber fraud. The incident serves as a stark reminder of the persistent threat of online financial scams targeting vulnerable individuals across India.
