Fake Bank Statement PDF Scam on WhatsApp

How it looks on WhatsApp, the red flags and what to do.

On WhatsApp the scammer can send images, voice notes, PDFs and APK files, and a friendly profile photo makes the first message feel safe. Fake Bank Statement PDF Scam is one of the ways this shows up: An email or message sends a bank statement or credit card bill as a file or link. Opening it installs malware or opens a fake login page.

What fake bank statement pdf scam looks like on WhatsApp

• A PDF, APK or image that must be opened to "see the details".
• A link that pretends to be a wa.me, courier or bank page.
• A message from an unknown number, often with a stock photo of a smiling person.

The scammer sends the message to large lists of addresses, using the name and logo of a bank or card issuer. The subject line is plain and timely, and the message body is short, asking you to 'find attached your statement'. Some use a sender name that looks right in the inbox but whose address is odd when you open the details.

Red flags to check on the WhatsApp message

• A statement arrives that you did not request.
• The sender address does not match your bank's website.
• You must log in or enable content to open the file.
• The file is an installation file or archive.
• A file ending in .apk arrives; never install it.
• Someone asks for the six-digit code WhatsApp sent you by SMS.

What to do

1. Do not open the attachment or tap the link.
2. Log in to your bank's official app to see your real statement.
3. Check the sender's address in the message details.
4. Warn the group or family, and report the number on Sanchar Saathi if it is a scam call or message.
5. Do not click links or open files. Do not send money or codes.
6. Open the chat, tap the contact name and choose Block and report.

Inside WhatsApp use Block and report; for numbers that call or text you, the Sanchar Saathi portal (Chakshu facility) also takes complaints.

If money or a code is already gone

1. If you typed a password, change it at once from a safe device and call your bank on the number on your card.
2. Call 1930 if money moved and give the transaction details.
3. Uninstall any app or file that you installed from the message.
4. Report at https://cybercrime.gov.in with the email and its headers.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's link check can review a download or login link before you open it for lookalike domains, shortened links and risky patterns, and the scam check can read the email text you paste. The phone scan can point out apps outside a store and apps that look like copies. It cannot scan email attachments, so do not open unexpected files.

Full guide: Fake Bank Statement PDF Scam: how it works, signs and what to do. Other channels: email, SMS.

Questions