Fake Bank App APK Scam on WhatsApp

How it looks on WhatsApp, the red flags and what to do.

WhatsApp scams arrive from numbers you do not know, from a friend whose account was taken over, or from a group you were added to without asking. Fake Bank App APK Scam is one of the ways this shows up: A message tells you to update your bank's mobile app from a link. The file is a fake app that steals logins and reads your OTP messages.

What fake bank app apk scam looks like on WhatsApp

• A PDF, APK or image that must be opened to "see the details".
• A link that pretends to be a wa.me, courier or bank page.
• A message from an unknown number, often with a stock photo of a smiling person.

The scammer sends a text or a WhatsApp message in the name of a bank, mentioning a new security update. The link does not open a store page. It downloads an installation file, which your phone warns about because it comes from an unknown source. The message tells you to ignore the warning and allow the install, because the update is urgent and official.

Red flags to check on the WhatsApp message

• An app update is sent by link instead of the official store.
• The phone warns about installing from an unknown source.
• You are told to ignore warnings and allow all permissions.
• The app asks to read messages or act as an accessibility service.
• A file ending in .apk arrives; never install it.
• Someone asks for the six-digit code WhatsApp sent you by SMS.

What to do

1. Do not install the file. Update only from the official store.
2. If you installed it, uninstall it and restart the phone.
3. Change your banking passwords and PIN from a safe device.
4. Open the chat, tap the contact name and choose Block and report.
5. If it was a "friend", call them on the number you already have and ask.
6. Turn on two-step verification in WhatsApp settings so a stolen SMS code is not enough.

Inside WhatsApp use Block and report; for numbers that call or text you, the Sanchar Saathi portal (Chakshu facility) also takes complaints.

If money or a code is already gone

1. Call your bank on the number on your card and block net banking, cards and UPI.
2. Call 1930 and give the transaction details and time.
3. Uninstall the fake app and change passwords from a safe device.
4. Report at https://cybercrime.gov.in with the message and the file name.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's phone scan reviews installed apps, requested permissions and risky settings, and it can point out apps outside a store and apps that look like copies of other apps, which is exactly what this scam relies on. The link check can review the download link first. Safeavio does not remove malware by magic, so follow the steps it shows. Use stores only.

Full guide: Fake Bank App APK Scam: how it works, signs and what to do. Other channels: SMS, fake app, email.

Questions