What is the new type of scam involving APK files?

Scammers trick individuals into downloading malicious APK files under the pretext of updating KYC details, which are then used to steal personal and financial information.

How do scammers initiate the APK scam?

Scammers send messages resembling official bank communications, warning that the recipient’s account will be blocked unless KYC details are updated.

An APK file is an Android Package file used to distribute and install applications on Android devices. Malicious APKs can contain malware.

What happens if I download the malicious APK file?

Once installed, the malware in the APK can give scammers control over your device, allowing them to lock it, steal information, and demand a ransom.

What are keyloggers, and how are they used in this scam?

Keyloggers are a type of malware that records all keystrokes on a device, capturing sensitive information like passwords and credit card numbers.

What is the new type of scam involving APK files?

Scammers trick individuals into downloading malicious APK files under the pretext of updating KYC details, which are then used to steal personal and financial information.

How do scammers initiate the APK scam?

Scammers send messages resembling official bank communications, warning that the recipient’s account will be blocked unless KYC details are updated.

An APK file is an Android Package file used to distribute and install applications on Android devices. Malicious APKs can contain malware.

What happens if I download the malicious APK file?

Once installed, the malware in the APK can give scammers control over your device, allowing them to lock it, steal information, and demand a ransom.

What are keyloggers, and how are they used in this scam?

Keyloggers are a type of malware that records all keystrokes on a device, capturing sensitive information like passwords and credit card numbers.

What is the new type of scam involving APK files?

Scammers trick individuals into downloading malicious APK files under the pretext of updating KYC details, which are then used to steal personal and financial information.

How do scammers initiate the APK scam?

Scammers send messages resembling official bank communications, warning that the recipient’s account will be blocked unless KYC details are updated.

An APK file is an Android Package file used to distribute and install applications on Android devices. Malicious APKs can contain malware.

What happens if I download the malicious APK file?

Once installed, the malware in the APK can give scammers control over your device, allowing them to lock it, steal information, and demand a ransom.

What are keyloggers, and how are they used in this scam?

Keyloggers are a type of malware that records all keystrokes on a device, capturing sensitive information like passwords and credit card numbers.

Home

Schemes

Services

Community

About Us

New APK Scam: How To Safeguard Your Bank Account & Your Phone

Neha Gupta

Author

Updated: 28-01-2025 at 6:37 AM

New APK Scam: How To Safeguard Your Bank Account & Your Phone

Scams are at an all-time high, and it is getting more difficult day by day to recognise such scams. This is a new type of scam where they trick you into downloading a malicious APK file, which is then used against you. Let’s understand how this scam works to not fall into the trap and be safe.

How Does The Scam Work?

Scammers send messages claiming that the person has to update the Know Your Customer (KYC) Details. They also scare them saying if the KYC is not updated then their accounts will be blocked. "They are asking customers to download APK files loaded with malware to steal account and personal information," Punjab and Sind Bank said.

Step 1: False Narrative

The scammer will send messages that sound exactly like how a bank would message. The message will contain a false narrative informing one that their bank account will be blocked if the KYC is not updated. In that panic, the scammer will also ask them to download an APK file on their device. Nowadays, cases of other scams like the UPI scam have come to light from which the citizens need to stay safe from.

"The intention behind such narratives is to create panic and then get you to install malicious APK files on the mobile devices. These are social engineering tactics. APK scams often work due to a combination of social engineering and user misinformation. Cybercriminals typically use compelling narratives that create a sense of urgency or offer a unique benefit to persuade users to download the APK," said Kaushik Ray, Chief Operating Officer of Whizhack Technologies.

Step 2: Installing The APK File

After convincing the people that the KYC needs to be updated, they then ask them to download the APK file which is a malicious file that will hack into the device and get access to whatever is there on the device.

Step 3: Scammers Get Control

After the malicious file is installed, the scammer will get a complete hold of the device and lock it. The scammer will then ask for a ransom in exchange for unlocking the device. The scammer may also try to expose their private information.

"One of the common functionalities of malware from fraudulent APKs can include keyloggers and clipboard access. A keylogger records all keystrokes made on the device, which can capture everything from passwords to credit card numbers. Similarly, by accessing the clipboard, the malware can read any data that has been copied, such as passwords and account numbers. This data can then be used to breach online banking or UPI accounts, leading to financial theft or identity fraud," says Kaushik Ray.

Also read: How To Stay Safe From ATM Card Tempering Scam

How To Stay Cautious?

Let’s understand how to not fall victim to this scam.

Never download files sent from unauthorised numbers.
Never click on unknown links.
Do not share personal information.
Do not send money to any unknown numbers.
Call the authorities if any suspicious activities take place.

Conclusion

With scams and frauds on the rise, it is incredibly important to be aware of such incidents. Various types of scams are taking place and it is getting harder and harder every day to recognise them. Always be alert and inform the authorities if any suspicious activities are noticed.

To report any suspicious activity, call 1930 or complain at the official Cyber Crime portal.

Frequently Asked Questions