A 49-year-old embroidery worker from Surat has become the latest victim of a sophisticated cyber fraud, losing a staggering sum of Rs 2.53 lakh after falling prey to a deceptive WhatsApp message disguised as a wedding invitation.
How the WhatsApp APK Scam Unfolded in Surat
The incident was reported at the Laskana police station on Saturday. The victim, identified as Vinu Nakrani (49), works at an embroidery unit in the Magod area of Surat. Nakrani received a message on WhatsApp containing an APK file named 'Lagna Amantran Card.apk'. Mistaking it for a digital wedding invitation card from a relative or acquaintance, he proceeded to download the file onto his device.
When the file failed to open any visible invitation, Nakrani grew suspicious. He sent a reply to the same WhatsApp number, asking for the sender's identity. However, he received no clarification. The real trouble began the very next day.
The Shocking Financial Aftermath
Nakrani first received an alert about a debit of Rs 25,000 from his Bank of India account. Alarmed, he immediately visited his bank branch to inquire. To his horror, bank officials informed him that a total of Rs 96,000 had already been siphoned off from that account.
Following the bank's advice, he promptly contacted the national cybercrime helpline 1930 and initiated the process of lodging a formal complaint. The ordeal did not end there. A thorough check of his other bank accounts revealed further devastating losses.
Rs 89,250 had been illegally withdrawn from his Bank of Baroda account, and another Rs 68,000 was taken from his Union Bank of India account. The cumulative loss from all three accounts amounted to a life-altering Rs 2.53 lakh.
Legal Action and Key Takeaways
Based on Nakrani's complaint, the Laskana police have registered a formal case. The charges have been filed under the relevant sections of the Bharatiya Nyaya Sanhita (BNS) and the Information Technology Act.
This case serves as a critical warning for all smartphone users. Cybercriminals are increasingly using social engineering tactics, exploiting trust and personal occasions like weddings to distribute malicious software. The APK file, once installed, likely granted the fraudsters remote access to Nakrani's phone, enabling them to bypass security and initiate unauthorized bank transfers.
Key precautions to remember:
- Never download APK files from unknown or unsolicited messages, even if they appear to be from contacts.
- Official wedding invitations are rarely sent as APK files; be wary of this format.
- Enable additional security features like two-factor authentication on banking and payment apps.
- If defrauded, immediately contact your bank to freeze accounts and call the cybercrime helpline 1930.
The Surat police's cyber cell is now investigating the digital trail to identify and apprehend the perpetrators behind this costly scam.