Fake Bank App APK Scam by SMS

How it looks by SMS, the red flags and what to do.

A text message is the cheapest way for a scammer to reach thousands of phones at once, and the sender name can look like a bank, a courier or a government office. Fake Bank App APK Scam is one of the ways this shows up: A message tells you to update your bank's mobile app from a link. The file is a fake app that steals logins and reads your OTP messages.

What fake bank app apk scam looks like by SMS

• Several near-identical messages arriving together from different senders.
• A sender name that resembles a bank, courier, tax or utility, or an ordinary mobile number.
• A very short message with a deadline such as "today" or "within 24 hours".

The scammer sends a text or a WhatsApp message in the name of a bank, mentioning a new security update. The link does not open a store page. It downloads an installation file, which your phone warns about because it comes from an unknown source. The message tells you to ignore the warning and allow the install, because the update is urgent and official.

Red flags to check on the text message

• An app update is sent by link instead of the official store.
• The phone warns about installing from an unknown source.
• You are told to ignore warnings and allow all permissions.
• The app asks to read messages or act as an accessibility service.
• The link domain is not the one you type yourself for that organisation.
• The message asks for an OTP, PIN, card number or password.

What to do

1. Do not install the file. Update only from the official store.
2. If you installed it, uninstall it and restart the phone.
3. Change your banking passwords and PIN from a safe device.
4. Delete the message and tell family members who may get the same text.
5. Do not reply, do not tap the link and do not call the number in the message.
6. Open the official app or type the official website yourself to see if there is any real notice.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. Call your bank on the number on your card and block net banking, cards and UPI.
2. Call 1930 and give the transaction details and time.
3. Uninstall the fake app and change passwords from a safe device.
4. Report at https://cybercrime.gov.in with the message and the file name.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's phone scan reviews installed apps, requested permissions and risky settings, and it can point out apps outside a store and apps that look like copies of other apps, which is exactly what this scam relies on. The link check can review the download link first. Safeavio does not remove malware by magic, so follow the steps it shows. Use stores only.

Full guide: Fake Bank App APK Scam: how it works, signs and what to do. Other channels: WhatsApp, fake app, email.

Questions