Wedding Invitation APK Shared on WhatsApp
A WhatsApp message with a file named like a wedding card ends in .apk. Installing it can give a scammer control of your SMS and bank apps.
A friend's number sends a file called 'Wedding Invitation.apk' with the message 'Please attend our wedding, open the card.' It looks like a harmless invitation, but an APK is an Android app. Installing it asks for many permissions, and then it can read your SMS, show fake bank screens or forward OTPs. The sender's account may have been taken over, which makes the message feel safe because it comes from a known name.
How the scam works
The scammer first controls an account or uses a number that resembles a contact. He sends a file to many people at once during wedding season, when invitations are common. The file name suggests a card, a photo album or a video. Because the phone does not open it like a picture, the viewer is asked to allow installation from this source, which is a setting people may accept without reading.
Once installed, the app asks for permission to read SMS, access notifications or display over other apps. Some hide their icon or take a plain name. In the background they forward incoming OTPs, copy your contact list to send the same file onward and show fake overlays when you open banking apps. Because the app seems to do nothing visible, the victim assumes the invitation did not open and forgets it.
The payoff comes later, when your OTPs are read and used to move money, or when your contacts receive the same file from your number. Some versions capture UPI PINs by showing a copy of a payment screen. The spread uses your trust network, so each infected phone sends it to dozens more, and family groups can become an easy path for the next round.
An example of what you may see
Example WhatsApp message (invented): 'Dear family and friends, with the blessings of elders we invite you to our wedding. Please open the invitation card file and confirm your presence. Looking forward to see you all, Rohit weds Anjali. (File: Wedding_Invitation_Card.apk)' Later, your phone asks to 'Allow this source to install apps' and then shows a prompt to allow SMS access. The message arrives from an uncle's number at midnight, and a minute later he sends the same file to the family group.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A wedding or festival invitation arrives as an app file ending in .apk.
- The sender is a contact, but the message is generic and has no personal detail.
- Your phone asks to allow installs from this source.
- The app asks for SMS, notification or display-over-apps permission.
- The app has no icon, a blank name or disappears after installation.
- Several contacts say they received the same file from you.
What to do right now
- Do not open or install the file; delete it and tell the sender through another channel.
- Never allow installation from unknown sources for chat apps or browsers.
- If you installed it, switch on airplane mode and uninstall the app from the app list and device admin settings.
- Change banking and email passwords from another safe device.
- Warn your family groups so they delete the file too.
If you already paid or shared a code
- Call 1930 and report at cybercrime.gov.in if money moved.
- Call your bank with the number on your card and ask them to block cards and watch the account.
- Change your UPI PIN and net-banking passwords after removing the app.
- Consider a factory reset after saving your photos, then set up the phone again carefully.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Phone scan in Safeavio Sentinel reviews installed apps, requested permissions and risky settings such as unknown sources, and it flags apps outside a store and apps that look like copies of other apps. You can also paste a message into Scam check. Safeavio does not read WhatsApp by itself, and it does not remove malware by magic; it tells you what looks wrong and how to fix it.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
What is an APK file?
It is the installer for an Android app. A genuine invitation would be an image, a PDF or a link. If a card arrives as an installer, treat it as software that may do things you cannot see.
My friend sent it. Is it safe?
Not necessarily. His account may have been taken over, or his phone infected. Call him and ask. Do not open files from a message that was not expected, even from known people. Check the app's name and permissions in Settings, and remove any app that asks for SMS access without a reason.
How do I check what my phone installed?
Open Settings, then Apps, and sort by recent installs. Look for unknown names or blank icons, and check device admin and special access lists. Uninstall anything you do not recognise. Look for recently installed apps and special access lists such as notification access and device admin.