Fake Bank App APK Scam through an app

How it looks through an app, the red flags and what to do.

A fake app can be installed from a link, from a file sent on chat or even from a lookalike listing. Once on your phone it can ask for powerful permissions. Fake Bank App APK Scam is one of the ways this shows up: A message tells you to update your bank's mobile app from a link. The file is a fake app that steals logins and reads your OTP messages.

What fake bank app apk scam looks like through an app

• A "KYC", "challan" or "bank rewards" app from a link.
• An .apk file sent on WhatsApp or by SMS.
• An app outside the official store that asks for many permissions.

The scammer sends a text or a WhatsApp message in the name of a bank, mentioning a new security update. The link does not open a store page. It downloads an installation file, which your phone warns about because it comes from an unknown source. The message tells you to ignore the warning and allow the install, because the update is urgent and official.

Red flags to check on the app

• An app update is sent by link instead of the official store.
• The phone warns about installing from an unknown source.
• You are told to ignore warnings and allow all permissions.
• The app asks to read messages or act as an accessibility service.
• It asks you to turn off Play Protect.
• The app does not come from the official store listing of the company.

What to do

1. Do not install the file. Update only from the official store.
2. If you installed it, uninstall it and restart the phone.
3. Change your banking passwords and PIN from a safe device.
4. Open Settings and check Accessibility, Device admin apps and Install unknown apps for anything you do not recognise.
5. Change the passwords of your bank and email from a clean device if the app had access.
6. Run a phone scan (Safeavio Sentinel lists risky apps and settings).

Report the fake app to the store it came from and, if money moved, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. Call your bank on the number on your card and block net banking, cards and UPI.
2. Call 1930 and give the transaction details and time.
3. Uninstall the fake app and change passwords from a safe device.
4. Report at https://cybercrime.gov.in with the message and the file name.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's phone scan reviews installed apps, requested permissions and risky settings, and it can point out apps outside a store and apps that look like copies of other apps, which is exactly what this scam relies on. The link check can review the download link first. Safeavio does not remove malware by magic, so follow the steps it shows. Use stores only.

Full guide: Fake Bank App APK Scam: how it works, signs and what to do. Other channels: SMS, WhatsApp, email.

Questions