Fake Bank App APK Scam
A message tells you to update your bank's mobile app from a link. The file is a fake app that steals logins and reads your OTP messages.
A message says your bank's mobile app has a mandatory update and you must install the new version from a link, or your account will stop working. The file that downloads looks like your bank's app, with its logo and colours. It is a copy built to steal your login and to read your messages, which means it can see the OTPs your bank sends.
How the scam works
The scammer sends a text or a WhatsApp message in the name of a bank, mentioning a new security update. The link does not open a store page. It downloads an installation file, which your phone warns about because it comes from an unknown source. The message tells you to ignore the warning and allow the install, because the update is urgent and official.
After install, the app opens a login screen that looks like the real one. It captures your customer ID, password and PIN, and asks for permission to read messages, view notifications and sometimes to act as an accessibility helper. These permissions let it see what is on screen and read incoming OTPs, even when you are not using the app.
The scammer logs in to your real banking account with your credentials, receives your OTPs through the app and transfers money out. The fake app can also hide bank alerts so that you do not notice. The theft may happen in minutes, and the app may stay on your phone for weeks, collecting more details every time you use banking or UPI.
An example of what you may see
Example only: 'Dear customer, a new version of your bank app is required to keep your account active. Download the update from the link below and install it today. Allow all permissions when asked. Old versions will stop working from tomorrow and your account may be blocked. Do not use the app store, this file is the latest secure version.' The link ends in a file name, not a store address.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- An app update is sent by link instead of the official store.
- The phone warns about installing from an unknown source.
- You are told to ignore warnings and allow all permissions.
- The app asks to read messages or act as an accessibility service.
- The link ends with a file name and no store address.
- The message threatens that your account will be blocked.
What to do right now
- Do not install the file. Update only from the official store.
- If you installed it, uninstall it and restart the phone.
- Change your banking passwords and PIN from a safe device.
- Check your bank app and statement for transactions you did not make.
- Report the message on the Sanchar Saathi portal.
If you already paid or shared a code
- Call your bank on the number on your card and block net banking, cards and UPI.
- Call 1930 and give the transaction details and time.
- Uninstall the fake app and change passwords from a safe device.
- Report at https://cybercrime.gov.in with the message and the file name.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's phone scan reviews installed apps, requested permissions and risky settings, and it can point out apps outside a store and apps that look like copies of other apps, which is exactly what this scam relies on. The link check can review the download link first. Safeavio does not remove malware by magic, so follow the steps it shows. Use stores only.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Where should I update my bank app?
Only from your phone's official app store, or through the bank's own website typed by hand if the bank says so. A link in a message that downloads a file is not a safe way to update a banking app.
What does 'unknown source' mean?
It means the app did not come from a store. Your phone warns you because such apps are not checked in the same way. If a message tells you to ignore that warning for a banking app, stop.
I installed the file. How do I clean up?
Uninstall the app, restart the phone, and change your passwords and PINs from a safe device. Call your bank to block access and cards, call 1930, and run a phone scan to look for other unusual apps.